| ⊦ a0 = a, (a0 ∈ st0[a, d] ⊕ st1 ↔ a0 ∈ (st0 ⊕ st1)[a, d]) ∧ (a0 ∈ st0[a, d] ⊕ st1 → (st0[a, d] ⊕ st1)[a0] = (st0 ⊕ st1)[a, d][a0]) |
⊦ a0 = a, (a0 ∈ st0[a, d] ⊕ st1 ↔ a0 ∈ st0 ⊕ st1) ∧ (a0 ∈ st0[a, d] ⊕ st1 → (st0[a, d] ⊕ st1)[a0] = (st0 ⊕ st1)[a0])
Used simplifier rules: At-other: ⊦ a ≠ b → st[b, d][a] = st[a]; from specification store%in-neq: ⊦ a ≠ b → (a ∈ st[b, d] ↔ a ∈ st); from specification store