| kar[m0, key-index(key, m1)][m2] = key-index(key0, m1), kar[m] = key-index(key, m1), ar[m1, ar[m1].idx:= m0][m1] = elemindex(a, m4), m2 < # kar, m2 < m, m < # kar, m2 + 1 < # kar, # ar ≤ m1, ∀ m2. ¬ m < m2 → kar[m2].idx < # ar ∧ ar[kar[m2].idx].idx = m2 ⊦ |
ar[m1, ar[m1].idx:= m0][m1] = elemindex(a, m4), kar[m] = key-index(key, m1), kar[m0, key-index(key, m1)][m2] = key-index(key0, m1), m2 = m0, m2 + 1 < # kar, m < # kar, m2 < m, m2 < # kar, # ar ≤ m1, ∀ m2. ¬ m < m2 → kar[m2].idx < # ar ∧ ar[kar[m2].idx].idx = m2 ⊦
ar[m1, ar[m1].idx:= m0][m1] = elemindex(a, m4), kar[m] = key-index(key, m1), kar[m0, key-index(key, m1)][m2] = key-index(key0, m1), m2 + 1 < # kar, m < # kar, m2 < m, m2 < # kar, # ar ≤ m1, ∀ m2. ¬ m < m2 → kar[m2].idx < # ar ∧ ar[kar[m2].idx].idx = m2 ⊦ m2 = m0
Used formulas: m2 = m0