| kar[m4 + 1] = key-index(key4, m6), kar[m1, key-index(key, m)][m4 / 2] = key-index(key3, m5), kar[m1] = key-index(key1, m), ar[m] = elemindex(a, m1), kar[m1, key-index(key, m)][(m1 - 1) / 2] = key-index(key0, m2), kar[m1, key-index(key, m)][m4 + 1] = key-index(key2, m3), kar[m4 / 2] = key-index(key5, m7), 2exp-size(# kar), m4 + 1 < # kar, key < key1, m1 < # kar, m1 < m0, m4 + 1 < m0, key2 < key3, no-dups-idx(kar, m0), valid-idx(kar, ar, m0), key-index(key1, m) ∈ keyset(kar, m0), m0 ≤ # kar, m1 = 0 ∨ ¬ key < key0 ⊦ # keyset(kar, m0) = 0, keyset(kar, m0) = ∅, key4 < key5 |
kar[m4 / 2] = key-index(key5, m7), kar[m1, key-index(key, m)][m4 + 1] = key-index(key2, m3), kar[m1, key-index(key, m)][(m1 - 1) / 2] = key-index(key0, m2), ar[m] = elemindex(a, m1), kar[m1] = key-index(key1, m), kar[m1, key-index(key, m)][m4 / 2] = key-index(key3, m5), kar[m4 + 1] = key-index(key4, m6), 2exp-size(# kar), key2 < key3, m4 + 1 < m0, m1 < m0, m1 < # kar, key < key1, m4 + 1 < # kar, no-dups-idx(kar, m0), valid-idx(kar, ar, m0), key-index(key1, m) ∈ keyset(kar, m0), m0 ≤ # kar, m1 = 0 ∨ ¬ key < key0 ⊦ # keyset(kar, m0) = 0, m4 / 2 = m1, keyset(kar, m0) = ∅, key4 < key5
Used simplifier rules: ⊦ m < # kar → kar[m, ki][m] = ki; (s)% ⊦ key-index(key, m) = key-index(key0, m0) ↔ key = key0 ∧ m = m0; (ws)% ⊦ m / 2 ≠ m + 1; (s)%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic%c: ⊦ m + n = n + m; from specification nat-basic%m ≠ n ⊦ kar[m, ki][n] = kar[n]; (s)% ⊦ m / 2 = 0 ↔ m = 0 ∨ m = 1; (s)%fle: ⊦ m < n ∧ n ≤ n0 → m < n0; (forward) from specification nat%lel: ⊦ key < key0 ∧ key = key1 → key1 < key0; (forward) from specification oelem[binheap-key]%transitivity: ⊦ key < key0 ∧ key0 < key1 → key < key1; (forward) from specification oelem[binheap-key]%nen: ⊦ ¬ key < key0 ∧ key0 = key1 → ¬ key < key1; (forward) from specification oelem[binheap-key] Used formulas: m4 / 2 = m1