| kar[m] = key-index(key0, m0), n ≤ # kar, ∀ m. m < n → kar[m].idx < # ar ∧ ar[kar[m].idx].idx = m ⊦ valid-idx(kar[m, key-index(key, m0)], ar, n) |
⊦ valid-idx(kar, ar, n) ↔ n ≤ # kar ∧ (∀ m. m < n → kar[m].idx < # ar ∧ ar[kar[m].idx].idx = m)
kar[m] = key-index(key0, m0), n ≤ # kar, ∀ m. m < n → kar[m].idx < # ar ∧ ar[kar[m].idx].idx = m ⊦ n ≤ # kar[m, key-index(key, m0)] ∧ (∀ m1. m1 < n → kar[m, key-index(key, m0)][m1].idx < # ar ∧ ar[kar[m, key-index(key, m0)][m1].idx].idx = m1)
Used terms: n, ar, kar[m, key-index(key, m0)]