| kar[m1] = key-index(key0, m), ar[m] = elemindex(a, m1), 2exp-size(# kar), heap-order(kar, m0), no-dups-idx(kar, m0), valid-idx(kar, ar, m0), m0 ≤ m1, m0 ≤ # kar, ∃ m1. m1 < m0 ∧ key-index(key0, m) = kar[m1] ⊦ # keyset(kar, m0) = 0, keyset(kar, m0) = ∅ |
ar[m] = elemindex(a, m1), kar[m1] = key-index(key0, m), key-index(key0, m) = kar[m2], 2exp-size(# kar), m2 < m0, m2 < # kar, m2 < m1, heap-order(kar, m0), no-dups-idx(kar, m0), valid-idx(kar, ar, m0), m0 ≤ # kar, m0 ≤ m1 ⊦ # keyset(kar, m0) = 0, keyset(kar, m0) = ∅
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%fle: ⊦ m < n ∧ n ≤ n0 → m < n0; (forward) from specification nat%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic