| a0 = a ⊦ (a0 ∈ st0[a, d] ⊕ st1 ↔ a0 ∈ (st0 ⊕ st1)[a, d]) ∧ (a0 ∈ st0[a, d] ⊕ st1 → (st0[a, d] ⊕ st1)[a0] = (st0 ⊕ st1)[a, d][a0]) |
a ∈ st0[a, d] ⊕ st1 ⊦ (st0[a, d] ⊕ st1)[a] = d
Used simplifier rules: oplus-l-in: ⊦ a ∈ st0 ⊕ st1 ↔ a ∈ st0 ∨ a ∈ st1;%At-same: ⊦ st[a, d][a] = d; from specification store%insin: ⊦ a ∈ st[a, d]; from specification store