| ar[n0, ar0[n0].idx:= m0][m2].idx:= m1 = elemindex(a, m3), ar[m2] = elemindex(a1, m0), ar[n0] = elemindex(a0, m1), kar[m0] = key-index(key1, m2), kar[m1] = key-index(key0, n0), m1 < # kar, m1 < n, n0 < # ar, m0 < # kar, m0 < n, m2 < # ar, n ≤ # kar, ∀ m. m < n → kar[m].idx < # ar ∧ ar[kar[m].idx].idx = m ⊦ m3 = m1 |
ar[n0, ar0[n0].idx:= m0][m2].idx:= m1 = elemindex(a, m3), kar[m1] = key-index(key0, n0), kar[m0] = key-index(key1, m2), ar[n0] = elemindex(a0, m1), ar[m2] = elemindex(a1, m0), m2 = n0, m2 < # ar, m0 < n, m0 < # kar, n0 < # ar, m1 < n, m1 < # kar, n ≤ # kar, ∀ m. m < n → kar[m].idx < # ar ∧ ar[kar[m].idx].idx = m ⊦ m3 = m1
Used simplifier rules: ⊦ m ≠ n → ar[n, ei][m] = ar[m]; (s)% ⊦ elemindex(a, m).idx:= m0 = elemindex(a, m0); (s)% ⊦ elemindex(a, m) = elemindex(a0, m0) ↔ a = a0 ∧ m = m0; (ws) Used formulas: m2 = n0