| as ⊆ alladrs, as ⊆ dom iast, ∃ r, zh, zbrar, dirty, nused. (null = null ⊃ ¬ dirty ∧ true(zh0);r = null ∧ zh = zh0) ∧ (dirty → dirty0) ∧ (adr ∈ as ↔ ¬ dirty) ∧ adr ∈ alladrs ∧ nsize(nused, nstat) ∧ unmodified(adr, mkznode(rp, zbrar, height = 0, dirty, nused), iast) ∧ (( r => mkznode(rp, zbrar, height = 0, dirty, nused) * bnode(r, zbrar, 0, nused, nused, height, dirty, ri, iast, as -- adr, alladrs -- adr) * true) )(zh) ⊦ ((btree(rp, null, adr, height, dirty0, ri, iast, as, alladrs, nstat) * true))(zh1) |
((r => mkznode(rp, zbrar, height = 0, false, nused) * bnode(r, zbrar, 0, nused, nused, height, false, ri, iast, as -- adr, alladrs -- adr) * true) )(zh), nsize(nused, nstat), unmodified(adr, mkznode(rp, zbrar, height = 0, false, nused), iast), adr ∈ as, adr ∈ alladrs, adr ∈ iast, as ⊆ alladrs, as ⊆ dom iast ⊦ # as = 0, # alladrs = 0, alladrs = ∅, as = ∅, ((btree(rp, null, adr, height, dirty0, ri, iast, as, alladrs, nstat) * true))(zh1)
Used simplifier rules: size-zero-01: ⊦ as ≠ ∅ → # as ≠ 0; (forward) from specification set-basic[node-store]% ⊦ adr ∈ dom iast ↔ adr ∈ iast; (s)%ne-01: ⊦ adr ∈ as → as ≠ ∅; (forward) from specification set-basic[node-store]%sub-in: ⊦ adr ∈ as ∧ as ⊆ as0 → adr ∈ as0; (forward) from specification set-basic[node-store]% ⊦ true(zh); (s)