| # kar0 = # kar, kar[n1] = key-index(key1, m2), kar[2 * n1 + 2] = key-index(key0, m1), kar[2 * n1 + 1] = key-index(key, m0), keyset(kar0, m) = keyset(kar, m), m = n2 + n0, 2 * n0 + 1 < # kar, n0 < # kar, 2 * n0 + 1 < m, kar0[2 * n0 + 1].idx < # ar, kar0[n0].idx < # ar, heap-order(kar0[n0, kar0[2 * n0 + 1]], m), id-idx(ar1, ar), no-dups-idx(kar0, m), no-dups-idx(kar, m), valid-idx(kar0, ar, m), valid-idx(kar, ar1, m), m ≤ # kar, n0 ≤ m, ¬ kar0[2 * n0 + 1].key < kar0[n0].key ∧ (2 * n0 + 2 < m → ¬ kar0[2 * n0 + 2].key < kar0[n0].key) → heap-order(kar0, m), 2 * n1 + 1 < m ∧ key < key1 ∨ 2 * n1 + 2 < m ∧ key0 < key1 → heap-order(kar[n1, (2 * n1 + 2 < m ∧ key0 < key ⊃ key-index(key0, m1);key-index(key, m0))], m), (2 * n1 + 1 < m → ¬ key < key1) ∧ (2 * n1 + 2 < m → ¬ key0 < key1) → heap-order(kar, m), 2 * n0 + 2 < m → 2 * n0 + 2 < # kar, kar0[2 * n0 + 1].key < kar0[n0].key ∨ 2 * n0 + 2 < m ∧ kar0[2 * n0 + 2].key < kar0[n0].key ⊦ 2 * n0 + 2 < m ∧ kar0[2 * n0 + 2].key < kar0[2 * n0 + 1].key, (3 + 4 * n0 < m → 3 + 4 * n0 < # kar ∧ (¬ kar0[3 + 4 * n0].key < kar0[n0].key → 4 + 4 * n0 < m → 4 + 4 * n0 < # kar)) ∧ no-dups-idx(kar0[n0, kar0[2 * n0 + 1]][2 * n0 + 1, kar0[n0]], m) ∧ valid-idx (kar0[n0, kar0[2 * n0 + 1]][2 * n0 + 1, kar0[n0]], ar[kar0[2 * n0 + 1].idx, ar[kar0[2 * n0 + 1].idx].idx:= n0] [kar0[n0].idx, ar[kar0[2 * n0 + 1].idx, ar[kar0[2 * n0 + 1].idx].idx:= n0][kar0[n0].idx].idx:= (2 * n0 + 1) ], m) ∧ ( (3 + 4 * n0 < m → ¬ kar0[3 + 4 * n0].key < kar0[n0].key) ∧ (4 + 4 * n0 < m → ¬ kar0[4 + 4 * n0].key < kar0[n0].key) → heap-order(kar0[n0, kar0[2 * n0 + 1]][2 * n0 + 1, kar0[n0]], m)) ∧ ( 3 + 4 * n0 < m ∧ kar0[3 + 4 * n0].key < kar0[n0].key ∨ 4 + 4 * n0 < m ∧ kar0[4 + 4 * n0].key < kar0[n0].key → heap-order (kar0[n0, kar0[2 * n0 + 1]] [2 * n0 + 1, (4 + 4 * n0 < m ∧ kar0[4 + 4 * n0].key < kar0[3 + 4 * n0].key ⊃ kar0[4 + 4 * n0];kar0[3 + 4 * n0]) ], m)) ∧ keyset(kar0[n0, kar0[2 * n0 + 1]][2 * n0 + 1, kar0[n0]], m) = keyset(kar, m) ∧ ¬ n2 + 2 * n0 < m |
# kar0 = # kar, kar[n1] = key-index(key1, m2), kar[2 * n1 + 2] = key-index(key0, m1), kar[2 * n1 + 1] = key-index(key, m0), keyset(kar0, n2 + n0) = keyset(kar, n2 + n0), n0 + 1 < n2, kar0[2 * n0 + 1].idx < # ar, kar0[n0].idx < # ar, 2 * n0 + 1 < # kar, n0 < # kar, heap-order(kar0[n0, kar0[2 * n0 + 1]], n2 + n0), id-idx(ar1, ar), no-dups-idx(kar0, n2 + n0), no-dups-idx(kar, n2 + n0), valid-idx(kar0, ar, n2 + n0), valid-idx(kar, ar1, n2 + n0), n2 + n0 ≤ # kar, ¬ kar0[2 * n0 + 1].key < kar0[n0].key ∧ (n0 + 2 < n2 → ¬ kar0[2 * n0 + 2].key < kar0[n0].key) → heap-order(kar0, n2 + n0), n0 + 2 < n2 → 2 * n0 + 2 < # kar, 2 * n1 + 1 < n2 + n0 ∧ key < key1 ∨ 2 * n1 + 2 < n2 + n0 ∧ key0 < key1 → heap-order(kar[n1, (2 * n1 + 2 < n2 + n0 ∧ key0 < key ⊃ key-index(key0, m1);key-index(key, m0))], n2 + n0), (2 * n1 + 1 < n2 + n0 → ¬ key < key1) ∧ (2 * n1 + 2 < n2 + n0 → ¬ key0 < key1) → heap-order(kar, n2 + n0), kar0[2 * n0 + 1].key < kar0[n0].key ∨ n0 + 2 < n2 ∧ kar0[2 * n0 + 2].key < kar0[n0].key ⊦ n0 + 2 < n2 ∧ kar0[2 * n0 + 2].key < kar0[2 * n0 + 1].key, (3 * n0 + 3 < n2 → 3 + 4 * n0 < # kar ∧ (¬ kar0[3 + 4 * n0].key < kar0[n0].key → 3 * n0 + 4 < n2 → 4 + 4 * n0 < # kar)) ∧ no-dups-idx(kar0[n0, kar0[2 * n0 + 1]][2 * n0 + 1, kar0[n0]], n2 + n0) ∧ valid-idx (kar0[n0, kar0[2 * n0 + 1]][2 * n0 + 1, kar0[n0]], ar[kar0[2 * n0 + 1].idx, ar[kar0[2 * n0 + 1].idx].idx:= n0] [kar0[n0].idx, ar[kar0[2 * n0 + 1].idx, ar[kar0[2 * n0 + 1].idx].idx:= n0][kar0[n0].idx].idx:= (2 * n0 + 1) ], n2 + n0) ∧ ( (3 * n0 + 3 < n2 → ¬ kar0[3 + 4 * n0].key < kar0[n0].key) ∧ (3 * n0 + 4 < n2 → ¬ kar0[4 + 4 * n0].key < kar0[n0].key) → heap-order(kar0[n0, kar0[2 * n0 + 1]][2 * n0 + 1, kar0[n0]], n2 + n0)) ∧ ( 3 * n0 + 3 < n2 ∧ kar0[3 + 4 * n0].key < kar0[n0].key ∨ 3 * n0 + 4 < n2 ∧ kar0[4 + 4 * n0].key < kar0[n0].key → heap-order (kar0[n0, kar0[2 * n0 + 1]] [2 * n0 + 1, (3 * n0 + 4 < n2 ∧ kar0[4 + 4 * n0].key < kar0[3 + 4 * n0].key ⊃ kar0[4 + 4 * n0];kar0[3 + 4 * n0]) ], n2 + n0)) ∧ keyset(kar0[n0, kar0[2 * n0 + 1]][2 * n0 + 1, kar0[n0]], n2 + n0) = keyset(kar, n2 + n0)
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic% ⊦ ¬ 2 * n < n; (s)% ⊦ m + n < m + n0 ↔ n < n0; (s)%mult-c: ⊦ m * n = n * m; from specification nat-mult%mult-a: ⊦ m0 * m * n = (m0 * m) * n; from specification nat-mult% ⊦ m0 * 1 = m0; (s)%m2 ≠ 0 ⊦ (* m2) * m + n < m + n0 ↔ (m2 - 1) * m + n < n0; (s)%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ m ≤ m + n; (s)