| ar[m] = elemindex(a, m1), kar[m1] = key-index(key, m), ar0 = ar, bh = bh0.size:= (bh0.size - 1), bh0 = bin-heap(kar, m0), n = m1, 2exp-size(# kar), n < bh0.size, heap-order(kar, m0), no-dups-idx(kar, m0), valid-idx(kar, ar, m0), key-index(key, m) ∈ keyset(kar, m0), m0 ≤ # kar, bh0.size ≥ 1 ⊦ # keyset(kar, m0) = 0, keyset(kar, m0) = ∅, bh.size ≠ 0 ∧ bh.size ≠ n, bh.size ≤ # bh.ar ∧ no-dups-idx(bh.ar, bh.size) ∧ valid-idx(bh.ar, ar, bh.size) ∧ 2exp-size(# bh.ar) ∧ heap-order(bh.ar, bh.size) ∧ id-idx(ar0, ar) ∧ keyset(bh.ar, bh.size) = keyset(kar, m0) -- key-index(key, m) |
kar[m1] = key-index(key, m), ar[m] = elemindex(a, m1), 2exp-size(# kar), m1 < m0, m1 < # kar, heap-order(kar, m0), no-dups-idx(kar, m0), valid-idx(kar, ar, m0), key-index(key, m) ∈ keyset(kar, m0), m0 ≤ # kar + 1, 1 ≤ m0, m0 ≤ # kar, 1 ≤ # kar ⊦ # keyset(kar, m0) = 0, keyset(kar, m0) = ∅, keyset(kar, m0 - 1) = keyset(kar, m0) -- key-index(key, m) ∧ heap-order(kar, m0 - 1) ∧ valid-idx(kar, ar, m0 - 1) ∧ no-dups-idx(kar, m0 - 1), m0 ≠ 1 ∧ m0 - 1 ≠ m1
Used simplifier rules: ⊦ m < n → ¬ n < m; (s)% ⊦ m < n + 1 ↔ ¬ n < m; (s)% ⊦ m ≤ m + n; (s)%not-zero: 0 < n ⊦ (* n) ≤ m → m ≠ 0; (forward) from specification nat%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ ¬ m + n < m; (s)%let: ⊦ n ≤ n0 ∧ n0 ≤ n1 → n ≤ n1; (forward) from specification nat%fle: ⊦ m < n ∧ n ≤ n0 → m < n0; (forward) from specification nat%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic% ⊦ m ≤ n → (n - m = 0 ↔ n = m); (s)% ⊦ id-idx(ar, ar); (s)%n0 ≤ n ⊦ n - n0 ≤ m ↔ n ≤ m + n0; (s)% ⊦ m < n → n ≠ 0; (s)% ⊦ m < 1 ↔ m = 0; (s)% ⊦ m ≤ n ↔ ¬ n < m; (ss)% ⊦ bin-heap(kar, m).ar = kar; (s)% ⊦ bin-heap(kar, m).size:= m0 = bin-heap(kar, m0); (s)% ⊦ n ≥ m ↔ m ≤ n; (s)% ⊦ bin-heap(kar, m).size = m; (s)