| # kar0 = # kar, kar[(n1 - 1) / 2] = key-index(key0, m1), kar[n1] = key-index(key, m0), kar0[m / 2] = key-index(key1, m3), keyset(kar0, m2) = keyset(kar, m2), m + 1 < # kar, m + 1 < m2, n1 < # kar, n1 < m2, m3 < # ar, kar0[m + 1].key < key1, kar0[m + 1].idx < # ar, m / 2 < m2, m / 2 < # kar, heap-order(kar0[m + 1, kar0[m / 2]], m2), id-idx(ar1, ar), no-dups-idx(kar, m2), no-dups-idx(kar0, m2), valid-idx(kar, ar1, m2), valid-idx(kar0, ar, m2), m2 ≤ # kar, n1 ≠ 0 ∧ key < key0 → heap-order(kar[n1, key-index(key0, m1)], m2), n1 = 0 ∨ ¬ key < key0 → heap-order(kar, m2) ⊦ # kar = 1, m2 = 1, keyset(kar0[m + 1, kar0[m / 2]][m / 2, kar0[m + 1]], m2) = keyset(kar, m2) ∧ ( m ≠ 0 ∧ m ≠ 1 ∧ kar0[m + 1].key < kar0[m + 1, kar0[m / 2]][m / 2, kar0[m + 1]][(m / 2 - 1) / 2].key → heap-order(kar0[m + 1, kar0[m / 2]][m / 2, kar0[m + 1, kar0[m / 2]][m / 2, kar0[m + 1]][(m / 2 - 1) / 2]], m2)) ∧ ( m = 0 ∨ m = 1 ∨ ¬ kar0[m + 1].key < kar0[m + 1, kar0[m / 2]][m / 2, kar0[m + 1]][(m / 2 - 1) / 2].key → heap-order(kar0[m + 1, kar0[m / 2]][m / 2, kar0[m + 1]], m2)) ∧ valid-idx (kar0[m + 1, kar0[m / 2]][m / 2, kar0[m + 1]], ar[m3, ar[m3].idx:= (m + 1)][kar0[m + 1].idx, ar[m3, ar[m3].idx:= (m + 1)][kar0[m + 1].idx].idx:= (m / 2)], m2) ∧ no-dups-idx(kar0[m + 1, kar0[m / 2]][m / 2, kar0[m + 1]], m2) ∧ (m ≠ 0 ∧ m ≠ 1 → (m / 2 - 1) / 2 < # kar ∧ 2 ≤ m) |
# kar0 = # kar, kar0[m / 2] = key-index(key1, m3), kar[n1] = key-index(key, m0), kar[(n1 - 1) / 2] = key-index(key0, m1), keyset(kar0, m2) = keyset(kar, m2), m / 2 < # kar, m / 2 < m2, kar0[m + 1].idx < # ar, kar0[m + 1].key < key1, m3 < # ar, n1 < m2, n1 < # kar, m + 1 < m2, m + 1 < # kar, heap-order(kar0[m + 1, key-index(key1, m3)], m2), id-idx(ar1, ar), no-dups-idx(kar0, m2), no-dups-idx(kar, m2), valid-idx(kar0, ar, m2), valid-idx(kar, ar1, m2), m2 ≤ # kar, n1 = 0 ∨ ¬ key < key0 → heap-order(kar, m2), n1 ≠ 0 ∧ key < key0 → heap-order(kar[n1, key-index(key0, m1)], m2) ⊦ # kar = 1, m2 = 1, keyset(kar0[m + 1, key-index(key1, m3)][m / 2, kar0[m + 1]], m2) = keyset(kar, m2) ∧ ( m ≠ 0 ∧ m ≠ 1 ∧ kar0[m + 1].key < kar0[m + 1, key-index(key1, m3)][m / 2, kar0[m + 1]][(m / 2 - 1) / 2].key → heap-order(kar0[m + 1, key-index(key1, m3)][m / 2, kar0[m + 1, key-index(key1, m3)][m / 2, kar0[m + 1]][(m / 2 - 1) / 2]], m2)) ∧ ( m = 0 ∨ m = 1 ∨ ¬ kar0[m + 1].key < kar0[m + 1, key-index(key1, m3)][m / 2, kar0[m + 1]][(m / 2 - 1) / 2].key → heap-order(kar0[m + 1, key-index(key1, m3)][m / 2, kar0[m + 1]], m2)) ∧ valid-idx (kar0[m + 1, key-index(key1, m3)][m / 2, kar0[m + 1]], ar[m3, ar[m3].idx:= (m + 1)][kar0[m + 1].idx, ar[m3, ar[m3].idx:= (m + 1)][kar0[m + 1].idx].idx:= (m / 2)], m2) ∧ no-dups-idx(kar0[m + 1, key-index(key1, m3)][m / 2, kar0[m + 1]], m2) ∧ (m ≠ 0 ∧ m ≠ 1 → (m / 2 - 1) / 2 < # kar ∧ 2 ≤ m)