| ∀ rp, r, adr0, dirty, ri, iast, adr, ind, as, alladrs, nstat, P, zh. ( ((btree(rp, r, adr0, height0, dirty, ri, iast[adr, ind], as, alladrs, nstat) * P))(zh) ↔ ((btree(rp, r, adr0, height0, dirty, ri, iast, as, alladrs, nstat) * P))(zh)) ∨ adr ∈ as ⊦ (∃ r0, zh0, zbrar, dirty0, nused. (r = null ⊃ ¬ dirty0 ∧ P(zh);r0 = r ∧ zh0 = zh) ∧ (dirty0 → dirty) ∧ (adr0 ∈ as ↔ ¬ dirty0) ∧ adr0 ∈ alladrs ∧ nsize(nused, nstat) ∧ unmodified(adr0, mkznode(rp, zbrar, false, dirty0, nused), iast[adr, ind]) ∧ (( r0 => mkznode(rp, zbrar, false, dirty0, nused) * bnode(r0, zbrar, 0, nused, nused, height0 + 1, dirty0, ri, iast[adr, ind], as -- adr0, alladrs -- adr0) * P) )(zh0)) ↔ (∃ r1, zh1, zbrar, dirty1, nused. (r = null ⊃ ¬ dirty1 ∧ P(zh);r1 = r ∧ zh1 = zh) ∧ (dirty1 → dirty) ∧ (adr0 ∈ as ↔ ¬ dirty1) ∧ adr0 ∈ alladrs ∧ nsize(nused, nstat) ∧ unmodified(adr0, mkznode(rp, zbrar, height0 + 1 = 0, dirty1, nused), iast) ∧ (( r1 => mkznode(rp, zbrar, height0 + 1 = 0, dirty1, nused) * bnode(r1, zbrar, 0, nused, nused, height0 + 1, dirty1, ri, iast, as -- adr0, alladrs -- adr0) * P) )(zh1)), adr ∈ as |
∀ rp, r, adr0, dirty, ri, iast, adr, ind, as, alladrs, nstat, P, zh. ( ((btree(rp, r, adr0, height0, dirty, ri, iast[adr, ind], as, alladrs, nstat) * P))(zh) ↔ ((btree(rp, r, adr0, height0, dirty, ri, iast, as, alladrs, nstat) * P))(zh)) ∨ adr ∈ as ⊦ (∃ r0, zh0, zbrar, dirty0, nused. (r = null ⊃ ¬ dirty0 ∧ P(zh);r0 = r ∧ zh0 = zh) ∧ (dirty0 → dirty) ∧ (adr0 ∈ as ↔ ¬ dirty0) ∧ adr0 ∈ alladrs ∧ nsize(nused, nstat) ∧ unmodified(adr0, mkznode(rp, zbrar, false, dirty0, nused), iast[adr, ind]) ∧ (( r0 => mkznode(rp, zbrar, false, dirty0, nused) * bnode(r0, zbrar, 0, nused, nused, height0 + 1, dirty0, ri, iast[adr, ind], as -- adr0, alladrs -- adr0) * P) )(zh0)) ↔ (∃ r0, zh0, zbrar, dirty0, nused. (r = null ⊃ ¬ dirty0 ∧ P(zh);r0 = r ∧ zh0 = zh) ∧ (dirty0 → dirty) ∧ (adr0 ∈ as ↔ ¬ dirty0) ∧ adr0 ∈ alladrs ∧ nsize(nused, nstat) ∧ unmodified(adr0, mkznode(rp, zbrar, false, dirty0, nused), iast) ∧ (( r0 => mkznode(rp, zbrar, false, dirty0, nused) * bnode(r0, zbrar, 0, nused, nused, height0 + 1, dirty0, ri, iast, as -- adr0, alladrs -- adr0) * P) )(zh0)), adr ∈ as
Used simplifier rules: c: ⊦ m + n = n + m; from specification nat-basic2%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic2%oz: ⊦ m + 1 ≠ 0; from specification nat-basic2