| m3 / 2 = m1 + 1, kar[m3 + 1] = key-index(key0, m0), kar[m4] = key-index(key1, m), m1 = m4 * 2 + n0, m1 + 1 < # kar, m3 + 1 < # kar, key0 < key1, m3 < m1, n0 < 2, ∀ m2. ¬ m1 < m2 ∧ m2 ≠ 0 → ¬ kar[m2].key < kar[(m2 - 1) / 2].key ⊦ 2 = 0, m3 = m1 |
m3 / 2 = (m4 * 2 + n0) + 1, kar[m3 + 1] = key-index(key0, m0), kar[m4] = key-index(key1, m), m3 / 2 < # kar, m3 + 1 < # kar, key0 < key1, m3 < m4 * 2 + n0, n0 < 2, ∀ m2. ¬ m4 * 2 + n0 < m2 ∧ m2 ≠ 0 → ¬ kar[m2].key < kar[(m2 - 1) / 2].key ⊦ m3 = m4 * 2 + n0
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic%lf-02: ⊦ m < n ∧ m = n0 → n0 < n; (forward) from specification nat-basic