| □ Inpf = Inpf', □ (Out = Outf(m) ∧ Outf' = (Outf(m; Out'))), true, true, Out' ≠ Outf'(m), Out = Outf(m), Outf' = (Outf(m; Out')), Inpf = Inpf' ⊦ |
□ (Out = Outf(m) ∧ Outf' = (Outf(m; Out'))), □ Inpf = Inpf', Inpf = Inpf', Outf' = (Outf(m; Out')), Out = Outf(m), Out' ≠ Outf'(m) ⊦