[Imprint]
[Data Privacy Statement]
[E-Mail]
View
long theorem info
. View
the proof
. Back to
main index
. View
the specification
. View
theorem base summary
, View
theorem base listing
, the
used properties by spec
, the
dependency list
, the
symbol table
,
Theorem btree-sub-clean-write-branches
n < # zbrar ⊦ zh[r].zbranches = zbrar ∧ zbrar[n].child = r1 ∧ ¬ zh[r1].dirty ∧ btree-sub-clean(r, n, zh) → btree-sub-clean(r, n + 1, zh[r, zh[r].zbranches:= zbrar[n, mkzbranch(key, adr, r1)]])
Type: A user defined theorem
Validity: The proof is valid.
Features: s, ls,
Comment:
Used by:
Used by units in proved state:
Proof exists?: Yes
View
the proof
Infos about the proof
Proved?: Yes
Interactions: 3
Proof steps: 22
Used lemmas:
btree-sub-clean
,
Used spec theorems:
Used simplifier rules:
znode
/
elim
znode
/
upd-02
nat
/
fle-01
nat
/
lels
znode
/
sel-02
nat-basic
/
c
nat-basic
/
a
nat-basic
/
s-04
znode
/
sel-05
znode
/
sel-03
heap
/zheap/
at-write
heap
/zheap/
in-write
zbranch
/
elim-01
oelem
/nat-set/
irreflexivity
nat
/
ler
zbranch
/
inj
array
/zbranch-array/
Put-same
znode
/
inj
nat-basic
/
lf-01
zbranch
/
test-03
nat-basic
/
succ
zbranch
/
sel-01
nat-basic
/
lf
nat-basic
/
f
nat
/
lels-02
array
/zbranch-array/
Put-other