| # kar0 = # kar, kar0[6 + 4 * n0] = key-index(key7, m7), kar0[2 * n0 + 1] = key-index(key2, m), kar[2 * n1 + 1] = key-index(key, m0), kar[2 * n1 + 2] = key-index(key0, m1), kar[n1] = key-index(key1, m2), kar0[2 * n0 + 2] = key-index(key3, m3), kar0[n0] = key-index(key4, m4), kar0[5 + 4 * n0] = key-index(key9, m9), keyset(kar0, n2 + n0) = keyset(kar, n2 + n0), key9 < key2, key9 < key3, n0 + 2 < n2, key3 < key2, n0 + 1 < n2, n0 < # kar, 2 * n0 + 1 < # kar, 2 * n0 + 2 < # kar, m3 < # ar, m4 < # ar, id-idx(ar1, ar), no-dups-idx(kar0, n2 + n0), no-dups-idx(kar, n2 + n0), valid-idx(kar0, ar, n2 + n0), valid-idx(kar, ar1, n2 + n0), n2 + n0 ≤ # kar, ¬ key2 < key4 ∧ ¬ key3 < key4 → heap-order(kar0, n2 + n0), (2 * n1 + 1 < n2 + n0 → ¬ key < key1) ∧ (2 * n1 + 2 < n2 + n0 → ¬ key0 < key1) → heap-order(kar, n2 + n0), 2 * n1 + 1 < n2 + n0 ∧ key < key1 ∨ 2 * n1 + 2 < n2 + n0 ∧ key0 < key1 → heap-order(kar[n1, (2 * n1 + 2 < n2 + n0 ∧ key0 < key ⊃ key-index(key0, m1);key-index(key, m0))], n2 + n0), ∀ m. m < n2 + n0 ∧ m ≠ 0 → ¬ kar0[n0, key-index(key3, m3)][m].key < kar0[n0, key-index(key3, m3)][(m - 1) / 2].key, ¬ 3 * n0 + 6 < n2 ∨ ¬ key7 < key9, 3 * n0 + 5 < n2 ∧ key9 < key4 ∨ 3 * n0 + 6 < n2 ∧ key7 < key4, key2 < key4 ∨ key3 < key4 ⊦ heap-order(kar0[n0, key-index(key3, m3)][2 * n0 + 2, key-index(key9, m9)], n2 + n0) |
Used simplifier rules: div2-mult4-add-k: ⊦ ((* n0) + 4 * n) / 2 = n0 / 2 + 2 * n;%m2 ≠ 0 ⊦ (* m2) * m + n < m + n0 ↔ (m2 - 1) * m + n < n0; (s)%mult-a: ⊦ m0 * m * n = (m0 * m) * n; from specification nat-mult%mult-c: ⊦ m * n = n * m; from specification nat-mult%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic%c: ⊦ m + n = n + m; from specification nat-basic%n < n0 ⊦ (* n) ≠ m0 + (* n0); (s)%m1 ≠ 0 ⊦ m = (* m1) * m + n0 ↔ 0 = (m1 - 1) * m + n0; (s)%m ≠ n ⊦ kar[m, ki][n] = kar[n]; (s)% ⊦ n ≤ m → m + n0 - n = (m - n) + n0; (s)% ⊦ m0 * 1 = m0; (s)% ⊦ key-index(key, m).key = key; (s)% ⊦ m < n ↔ ¬ n ≤ m; (ss)% ⊦ m ≤ n → (n < m ↔ false); (s)%fle: ⊦ m < n ∧ n ≤ n0 → m < n0; (forward) from specification nat%nll: ⊦ ¬ key < key0 ∧ key < key1 → key0 < key1; (forward) from specification oelem[binheap-key]%n < n0 ⊦ m + (* n) < m0 + (* n0) ↔ m < m0 + (n0 - n); (s)% ⊦ m + n < m + n0 ↔ n < n0; (s)%transitivity: ⊦ key < key0 ∧ key0 < key1 → key < key1; (forward) from specification oelem[binheap-key] Used terms: 5 + 4 * n0