| kar[m3 / 2] = key-index(key3, m5), kar[m0] = key-index(key1, m), kar[m3 + 1] = key-index(key, m1), kar[0] = key-index(key0, m2), kar[(m0 - 1) / 2] = key-index(key2, m4), m3 = 0, m3 / 2 + 1 < # kar, m3 < # kar, m3 < n0, key < key0, n0 < # kar, m3 + 1 < # kar, m3 / 2 < n0, m3 / 2 < # kar, key3 < key0 ∧ (m0 < n0 ∧ m0 ≠ 0 → ¬ key1 < key2) → m3 = 0 ∨ m3 = 1, ∀ m0. ¬ n0 < m0 ∧ m0 ≠ 0 → ¬ kar[m0].key < kar[(m0 - 1) / 2].key ⊦ |
kar[1] = key-index(key, m1), kar[m0] = key-index(key1, m), kar[0] = key-index(key0, m2), kar[(m0 - 1) / 2] = key-index(key2, m4), n0 < # kar, key < key0, ∀ m0. ¬ n0 < m0 ∧ m0 ≠ 0 → ¬ kar[m0].key < kar[(m0 - 1) / 2].key ⊦ # kar = 1, n0 = 0
Used simplifier rules: ⊦ key-index(key, m) = key-index(key0, m0) ↔ key = key0 ∧ m = m0; (ws)% ⊦ 1 < m ↔ ¬(m = 0 ∨ m = 1); (s)% ⊦ m < n → n ≠ 0; (s)% ⊦ 0 < m ↔ m ≠ 0; (s)%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic