| bin-heap-inv(bh, ar) ⊦ ⟪bin_min_heap_get_min#(bh; n)⟫ ∃ key. key-index(key, n) ∈ keyset(bh) ∧ (∀ ki. ki ∈ keyset(bh) → ¬ ki.key < key), keyset(bh) = ∅ |
# keyset(bh.ar, bh.size) ≠ 0, keyset(bh.ar, bh.size) ≠ ∅, 2exp-size(# bh.ar), heap-order(bh.ar, bh.size), no-dups-idx(bh.ar, bh.size), valid-idx(bh.ar, ar, bh.size), bh.size ≤ # bh.ar ⊦ ⟪bin_min_heap_get_min#(bh; n)⟫ ∃ key. key-index(key, n) ∈ keyset(bh.ar, bh.size) ∧ (∀ ki. ki ∈ keyset(bh.ar, bh.size) → ¬ ki.key < key)
Used simplifier rules: keyset: ⊦ keyset(bh) = keyset(bh.ar, bh.size);%bin-heap-inv-def: ⊦ bin-heap-inv(bh, ar) ↔ bh.size ≤ # bh.ar ∧ no-dups-idx(bh.ar, bh.size) ∧ valid-idx(bh.ar, ar, bh.size) ∧ 2exp-size(# bh.ar) ∧ heap-order(bh.ar, bh.size);%size-zero: ⊦ # s ≠ 0 → s ≠ ∅; (forward) from specification set-basic[keyindex-set]%size-zero-01: ⊦ s ≠ ∅ → # s ≠ 0; (forward) from specification set-basic[keyindex-set]