| kar[m] = key-index(key0, m3), kar[m1] = key-index(key, m3), m0 < # kar, m0 < m, m1 < m, m1 < # kar, m < # kar, m1 + 1 < # kar, m0 + 1 < # kar, ∀ m1, m2. m1 < # kar ∧ ¬ m < m1 ∧ m2 < # kar ∧ ¬ m < m2 ∧ m1 ≠ m2 → kar[m1].idx ≠ kar[m2].idx ⊦ m1 = m0 |
Used simplifier rules: ⊦ m < n → ¬ n < m; (s)% ⊦ ¬ n < n; (s)% ⊦ key-index(key, m).idx = m; (s)%lf-01: ⊦ m < n ∧ n = n0 → m < n0; (forward) from specification nat-basic%lf-02: ⊦ m < n ∧ m = n0 → n0 < n; (forward) from specification nat-basic Used terms: m1, m