| ar[m4] = elemindex(a0, m5), ar[n1] = elemindex(a1, m0), ar[n0] = elemindex(a2, m1), kar[m5] = key-index(key2, m4), kar[m1] = key-index(key0, n0), kar[m0] = key-index(key1, n1), ar[n0, elemindex(a2, m0)][m4] = elemindex(a, m3), m1 < # kar, m5 < n, m4 < # ar, n1 < # ar, m5 < # kar, m1 < n, n0 < # ar, m0 < # kar, m0 < n, n ≤ # kar, ∀ m. m < n → kar[m].idx < # ar ∧ ar[kar[m].idx].idx = m ⊦ m3 = m5, m4 = n1, m5 = m0, m5 = m1 |
Used simplifier rules: ⊦ m ≠ n → ar[n, ei][m] = ar[m]; (s)% ⊦ elemindex(a, m) = elemindex(a0, m0) ↔ a = a0 ∧ m = m0; (ws)% ⊦ m < # ar → ar[m, ei][m] = ei; (s)%lf-02: ⊦ m < n ∧ m = n0 → n0 < n; (forward) from specification nat-basic Used formulas: m4 = n0