| kar[m0, key-index(key, m1)][m2] = key-index(key0, m3), kar[m] = key-index(key, m1), ar[m3] = elemindex(a, m4), m2 < # kar, m2 < m, m < # kar, m2 + 1 < # kar, ∀ m2. ¬ m < m2 → kar[m2].idx < # ar ∧ ar[kar[m2].idx].idx = m2 ⊦ m3 = m1, m3 < # ar ∧ m4 = m2 |
ar[m3] = elemindex(a, m4), kar[m] = key-index(key, m1), kar[m0, key-index(key, m1)][m2] = key-index(key0, m3), m2 + 1 < # kar, m < # kar, m2 < m, m2 < # kar, ∀ m2. ¬ m < m2 → kar[m2].idx < # ar ∧ ar[kar[m2].idx].idx = m2 ⊦ m2 = m0, m3 = m1, m3 < # ar ∧ m4 = m2
Used simplifier rules: ⊦ m < # kar → kar[m, ki][m] = ki; (s)% ⊦ key-index(key, m) = key-index(key0, m0) ↔ key = key0 ∧ m = m0; (ws) Used formulas: m2 = m0