| ar[m2] = elemindex(a, m3), kar[m] = key-index(key0, m0), kar[m, key-index(key, m0)][m1] = key-index(key1, m2), m1 < # kar, m1 < n, n ≤ # kar, ∀ m. m < n → kar[m].idx < # ar ∧ ar[kar[m].idx].idx = m ⊦ m1 = m, m2 < # ar ∧ m3 = m1 |
kar[m] = key-index(key0, m0), ar[m2] = elemindex(a, m3), kar[m1] = key-index(key1, m2), m1 < n, m1 < # kar, n ≤ # kar, ∀ m. m < n → kar[m].idx < # ar ∧ ar[kar[m].idx].idx = m ⊦ m1 = m, m2 < # ar ∧ m3 = m1
Used simplifier rules: ⊦ m ≠ n → kar[n, ki][m] = kar[m]; (s)