| ar0 = ar, bh = bin-heap(kar, m), bh = bh, bh1 = bh, minsize0 = m + 1, 2exp-size(# kar), m0 < # ar, bin-heap-inv(bh, ar), heap-order(kar, m), no-dups-idx(kar, m), valid-idx(kar, ar, m), m ≤ # kar, ∀ ki0. ki0 ∈ keyset(kar, m) → ki0.idx ≠ m0 ⊦ [bin_min_heap_resize#(m + 1; bh)] ( bin-heap-inv(bh, ar0) ∧ bh.size = bh1.size ∧ # bh.ar ≥ minsize0 ∧ subarray(bh.ar, 0, bh.size) = subarray(bh1.ar, 0, bh1.size) → ⟪bh.ar[bh.size] := key-index(key, m0); ar1 := ar[m0, ar[m0].idx:= bh.size]; bh.size := bh.size + 1; bin_min_heap_bubble_up#(bh.size - 1; bh, ar1)⟫ ( bh.size ≤ # bh.ar ∧ no-dups-idx(bh.ar, bh.size) ∧ valid-idx(bh.ar, ar1, bh.size) ∧ 2exp-size(# bh.ar) ∧ heap-order(bh.ar, bh.size) ∧ id-idx(ar, ar1) ∧ keyset(bh.ar, bh.size) = keyset(kar, m) ++ key-index(key, m0))) |
bh = bin-heap(kar, m), 2exp-size(# kar), m0 < # ar, heap-order(kar, m), no-dups-idx(kar, m), valid-idx(kar, ar, m), m ≤ # kar, ∀ ki0. ki0 ∈ keyset(kar, m) → ki0.idx ≠ m0 ⊦ [bin_min_heap_resize#(m + 1; bh)] ( no-dups-idx(bh.ar, bh.size) ∧ valid-idx(bh.ar, ar, bh.size) ∧ 2exp-size(# bh.ar) ∧ heap-order(bh.ar, bh.size) ∧ bh.size = m ∧ bh.size < # bh.ar ∧ subarray(bh.ar, 0, bh.size) = subarray(kar, 0, bh.size) → ⟪bh0 := bh.ar:= bh.ar[bh.size, key-index(key, m0)]; ar1 := ar[m0, ar[m0].idx:= bh0.size]; bh0.size := bh0.size + 1; bin_min_heap_bubble_up#(bh0.size - 1; bh0, ar1)⟫ ( bh0.size ≤ # bh0.ar ∧ no-dups-idx(bh0.ar, bh0.size) ∧ valid-idx(bh0.ar, ar1, bh0.size) ∧ 2exp-size(# bh0.ar) ∧ heap-order(bh0.ar, bh0.size) ∧ id-idx(ar, ar1) ∧ keyset(bh0.ar, bh0.size) = keyset(kar, bh.size) ++ key-index(key, m0)))
Used simplifier rules: bin-heap-inv-def: ⊦ bin-heap-inv(bh, ar) ↔ bh.size ≤ # bh.ar ∧ no-dups-idx(bh.ar, bh.size) ∧ valid-idx(bh.ar, ar, bh.size) ∧ 2exp-size(# bh.ar) ∧ heap-order(bh.ar, bh.size);% ⊦ m < n → m ≤ n; (s)%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ m + 1 ≤ n ↔ m < n; (s)% ⊦ n ≥ m ↔ m ≤ n; (s)% ⊦ bin-heap(kar, m).ar = kar; (s)% ⊦ bin-heap(kar, m).size = m; (s)