| m0 < # kar, n < # kar, n ≤ m0, ∀ n, kar, ki. n < m0 ∧ n < # kar ∧ m0 ≤ # kar → keyset(kar[n, ki], m0) ++ kar[n] = keyset(kar, m0) ++ ki ⊦ keyset(kar[n, ki], m0) ++ kar[n, ki][m0] ++ kar[n] = keyset(kar, m0) ++ kar[m0] ++ ki, m0 = n |
n < m0, m0 < # kar, n < # kar, n + 1 < # kar, ∀ n, kar, ki. n < m0 ∧ n < # kar ∧ m0 ≤ # kar → keyset(kar[n, ki], m0) ++ kar[n] = keyset(kar, m0) ++ ki ⊦ keyset(kar[n, ki], m0) ++ kar[m0] ++ kar[n] = keyset(kar, m0) ++ kar[m0] ++ ki, m0 = n
Used simplifier rules: ⊦ m +1 = m + 1; (s)% ⊦ m < n → n ≠ 0; (s)%lf: ⊦ m < n ∧ n < n0 → m +1 < n0; (forward) from specification nat-basic%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic% ⊦ m ≠ n → (m ≤ n ↔ m < n); (s)% ⊦ m ≠ n → kar[n, ki][m] = kar[m]; (s)