| # kar0 = # kar, kar[2 * n1 + 1] = key-index(key, m0), kar[2 * n1 + 2] = key-index(key0, m1), kar[n1] = key-index(key1, m2), bh0 = bin-heap(kar0, m), keyset(kar0, m) = keyset(kar, m), kar0[n0].idx < # ar, kar0[2 * n0 + 1].idx < # ar, 2 * n0 + 1 < m, n0 < # kar, 2 * n0 + 1 < # kar, heap-order(kar0[n0, kar0[2 * n0 + 1]], m), id-idx(ar1, ar), no-dups-idx(kar, m), no-dups-idx(kar0, m), valid-idx(kar, ar1, m), valid-idx(kar0, ar, m), m ≤ # kar, 2 * n0 + 2 < m → 2 * n0 + 2 < # kar, (2 * n1 + 1 < m → ¬ key < key1) ∧ (2 * n1 + 2 < m → ¬ key0 < key1) → heap-order(kar, m), 2 * n1 + 1 < m ∧ key < key1 ∨ 2 * n1 + 2 < m ∧ key0 < key1 → heap-order(kar[n1, (2 * n1 + 2 < m ∧ key0 < key ⊃ key-index(key0, m1);key-index(key, m0))], m), ¬ kar0[2 * n0 + 1].key < kar0[n0].key ∧ (2 * n0 + 2 < m → ¬ kar0[2 * n0 + 2].key < kar0[n0].key) → heap-order(kar0, m), kar0[2 * n0 + 1].key < kar0[n0].key ∨ 2 * n0 + 2 < m ∧ kar0[2 * n0 + 2].key < kar0[n0].key ⊦ (3 + 4 * n0 < m → 3 + 4 * n0 < # kar ∧ (¬ kar0[3 + 4 * n0].key < kar0[n0].key → 4 + 4 * n0 < m → 4 + 4 * n0 < # kar)) ∧ no-dups-idx(kar0[n0, kar0[2 * n0 + 1]][2 * n0 + 1, kar0[n0]], m) ∧ valid-idx (kar0[n0, kar0[2 * n0 + 1]][2 * n0 + 1, kar0[n0]], ar[kar0[2 * n0 + 1].idx, ar[kar0[2 * n0 + 1].idx].idx:= n0] [kar0[n0].idx, ar[kar0[2 * n0 + 1].idx, ar[kar0[2 * n0 + 1].idx].idx:= n0][kar0[n0].idx].idx:= (2 * n0 + 1) ], m) ∧ ( (3 + 4 * n0 < m → ¬ kar0[3 + 4 * n0].key < kar0[n0].key) ∧ (4 + 4 * n0 < m → ¬ kar0[4 + 4 * n0].key < kar0[n0].key) → heap-order(kar0[n0, kar0[2 * n0 + 1]][2 * n0 + 1, kar0[n0]], m)) ∧ ( 3 + 4 * n0 < m ∧ kar0[3 + 4 * n0].key < kar0[n0].key ∨ 4 + 4 * n0 < m ∧ kar0[4 + 4 * n0].key < kar0[n0].key → heap-order (kar0[n0, kar0[2 * n0 + 1]] [2 * n0 + 1, (4 + 4 * n0 < m ∧ kar0[4 + 4 * n0].key < kar0[3 + 4 * n0].key ⊃ kar0[4 + 4 * n0];kar0[3 + 4 * n0]) ], m)) ∧ keyset(kar0[n0, kar0[2 * n0 + 1]][2 * n0 + 1, kar0[n0]], m) = keyset(kar, m) ∧ ¬ (m - n0) + 2 * n0 < m, 2 * n0 + 2 < m ∧ kar0[2 * n0 + 2].key < kar0[2 * n0 + 1].key |
# kar0 = # kar, kar[2 * n1 + 1] = key-index(key, m0), kar[2 * n1 + 2] = key-index(key0, m1), kar[n1] = key-index(key1, m2), keyset(kar0, m) = keyset(kar, m), kar0[n0].idx < # ar, kar0[2 * n0 + 1].idx < # ar, 2 * n0 + 1 < m, n0 < # kar, 2 * n0 + 1 < # kar, heap-order(kar0[n0, kar0[2 * n0 + 1]], m), id-idx(ar1, ar), no-dups-idx(kar, m), no-dups-idx(kar0, m), valid-idx(kar, ar1, m), valid-idx(kar0, ar, m), m ≤ # kar, 2 * n0 + 2 < m → 2 * n0 + 2 < # kar, (2 * n1 + 1 < m → ¬ key < key1) ∧ (2 * n1 + 2 < m → ¬ key0 < key1) → heap-order(kar, m), 2 * n1 + 1 < m ∧ key < key1 ∨ 2 * n1 + 2 < m ∧ key0 < key1 → heap-order(kar[n1, (2 * n1 + 2 < m ∧ key0 < key ⊃ key-index(key0, m1);key-index(key, m0))], m), ¬ kar0[2 * n0 + 1].key < kar0[n0].key ∧ (2 * n0 + 2 < m → ¬ kar0[2 * n0 + 2].key < kar0[n0].key) → heap-order(kar0, m), kar0[2 * n0 + 1].key < kar0[n0].key ∨ 2 * n0 + 2 < m ∧ kar0[2 * n0 + 2].key < kar0[n0].key ⊦ (3 + 4 * n0 < m → 3 + 4 * n0 < # kar ∧ (¬ kar0[3 + 4 * n0].key < kar0[n0].key → 4 + 4 * n0 < m → 4 + 4 * n0 < # kar)) ∧ no-dups-idx(kar0[n0, kar0[2 * n0 + 1]][2 * n0 + 1, kar0[n0]], m) ∧ valid-idx (kar0[n0, kar0[2 * n0 + 1]][2 * n0 + 1, kar0[n0]], ar[kar0[2 * n0 + 1].idx, ar[kar0[2 * n0 + 1].idx].idx:= n0] [kar0[n0].idx, ar[kar0[2 * n0 + 1].idx, ar[kar0[2 * n0 + 1].idx].idx:= n0][kar0[n0].idx].idx:= (2 * n0 + 1) ], m) ∧ ( (3 + 4 * n0 < m → ¬ kar0[3 + 4 * n0].key < kar0[n0].key) ∧ (4 + 4 * n0 < m → ¬ kar0[4 + 4 * n0].key < kar0[n0].key) → heap-order(kar0[n0, kar0[2 * n0 + 1]][2 * n0 + 1, kar0[n0]], m)) ∧ ( 3 + 4 * n0 < m ∧ kar0[3 + 4 * n0].key < kar0[n0].key ∨ 4 + 4 * n0 < m ∧ kar0[4 + 4 * n0].key < kar0[n0].key → heap-order (kar0[n0, kar0[2 * n0 + 1]] [2 * n0 + 1, (4 + 4 * n0 < m ∧ kar0[4 + 4 * n0].key < kar0[3 + 4 * n0].key ⊃ kar0[4 + 4 * n0];kar0[3 + 4 * n0]) ], m)) ∧ keyset(kar0[n0, kar0[2 * n0 + 1]][2 * n0 + 1, kar0[n0]], m) = keyset(kar, m) ∧ ¬ (m - n0) + 2 * n0 < m, 2 * n0 + 2 < m ∧ kar0[2 * n0 + 2].key < kar0[2 * n0 + 1].key
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%lf-01: ⊦ m < n ∧ n = n0 → m < n0; (forward) from specification nat-basic%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic