| ar[m1, ar[m1].idx:= m0][m1] = elemindex(a, m4), kar[m] = key-index(key, m1), kar[m0, key-index(key, m1)][m2] = key-index(key0, m1), m2 + 1 < # kar, m < # kar, m2 < m, m2 < # kar, ∀ m2. ¬ m < m2 → kar[m2].idx < # ar ∧ ar[kar[m2].idx].idx = m2 ⊦ m1 < # ar, m1 < # ar ∧ m4 = m2 |
kar[m0, key-index(key, m1)][m2] = key-index(key0, m1), kar[m] = key-index(key, m1), ar[m1, ar[m1].idx:= m0][m1] = elemindex(a, m4), m2 < # kar, m2 < m, m < # kar, m2 + 1 < # kar, # ar ≤ m1, ∀ m2. ¬ m < m2 → kar[m2].idx < # ar ∧ ar[kar[m2].idx].idx = m2 ⊦
Used simplifier rules: ⊦ m ≤ n → (n < m ↔ false); (s)% ⊦ m < n ↔ ¬ n ≤ m; (ss)