| ⊦ a ∈ s, (a0 ∈ st[a, d] \ s ↔ a0 ∈ (st \ s)[a, d]) ∧ (st[a, d] \ s)[a0] = (st \ s)[a, d][a0] |
⊦ a0 = a, a ∈ s, (a0 ∈ st[a, d] \ s ↔ a0 ∈ (st \ s)[a, d]) ∧ (st[a, d] \ s)[a0] = (st \ s)[a, d][a0]
Used simplifier rules: Diff-ext: ⊦ a ∈ st \ s ↔ a ∈ st ∧ ¬ a ∈ s;%Diff-get: ⊦ ¬ a ∈ s → (st \ s)[a] = st[a];%insin: ⊦ a ∈ st[a, d]; from specification store%At-same: ⊦ st[a, d][a] = d; from specification store Used formulas: a0 = a