[Imprint]
[Data Privacy Statement]
[E-Mail]
View
long theorem info
. View
the proof
. Back to
main index
. View
the specification
. View
theorem base summary
, View
theorem base listing
, the
used properties by spec
, the
dependency list
, the
symbol table
,
Theorem diff-at
r ∈ h0, ¬ r ∈ h1 ⊦ (h0 \ h1)(r) = h0(r)
Type: A user defined theorem
Validity: The proof is valid.
Features: s, ls,
Comment:
Used by:
disj-diff-id1
,
subset-uni
,
union-diff-distr
,
union-split2
,
Used by units in proved state:
Proof exists?: Yes
View
the proof
Infos about the proof
Proved?: Yes
Interactions: 5
Proof steps: 10
Used lemmas:
diff-alloc
,
diff-write
,
diff-emp
,
Used spec theorems:
heap
/
ext
heap
/
exin
Used simplifier rules:
heap
/
in-emp
heap
/
sanity
heap
/
in-alloc
heap
/
in-write
heap
/
at-del
heap
/
in-del
heapfuns
/
size-write
heapfuns
/
size-alloc
nat-basic
/
s-04
nat-basic
/
refl-Nat
nat-basic
/
a
nat-basic
/
c