| ∀ adr, asar, n. adr ∈ union(asar, n, m0) ↔ (∃ n0. n ≤ n0 ∧ n0 < n + m0 ∧ adr ∈ asar[n0]) ⊦ adr ∈ union(asar, n, m0 +1) ↔ (∃ n0. n ≤ n0 ∧ n0 < n + m0 +1 ∧ adr ∈ asar[n0]) |
∀ adr, asar, n. adr ∈ union(asar, n, m0) ↔ (∃ n0. n ≤ n0 ∧ n0 < n + m0 ∧ adr ∈ asar[n0]) ⊦ adr ∈ asar[n + m0] ∪ union(asar, n, m0) ↔ (∃ n0. n ≤ n0 ∧ ¬ n + m0 < n0 ∧ adr ∈ asar[n0])
Used simplifier rules: union-rec: ⊦ union(asar, n, m + 1) = asar[n + m] ∪ union(asar, n, m);% ⊦ m < n + 1 ↔ ¬ n < m; (s)%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ m +1 = m + 1; (s)