At: add  action  mem 1 2 1 2 2 1
1. St: Type
2. l: St*
3. f: St
St
4. s: St
5. u: St
6. v: St*
7. mem_f(St;s;(+f)(v)) 
 mem_f(St;s;v) 
 (
s':St. mem_f(St;s';v)  &  f(s') = s)
8. mem_f(St;s;(+f)(v))
9. mem_f(St;s;v)
 
 u = s 
 mem_f(St;s;v) 
 (
s':St. u = s' 
 mem_f(St;s';v)  &  f(s') = s)
By: ProveProp
Generated subgoals:None
About: