| ((nP2(n + m0) * true * P0 * nP ⊗_(n, m0)))(zh), ((nP ⊗_(n, m0) * nP(n + m0) * P0))(zh), ((nP ⊗_(n, m0) * P0 * nP2(n + m0) * true))(zh) ∧ (∀ n0, P. n0 < m0 ∧ ((nP(n + n0) * P))(zh) → ((nP2(n + n0) * true * P))(zh)) → ((nP2 ⊗_(n, m0) * true * P0 * nP2(n + m0) * true))(zh), ∀ n0, P. ¬ m0 < n0 ∧ ((nP(n + n0) * P))(zh) → ((nP2(n + n0) * true * P))(zh) ⊦ ((nP2 ⊗_(n, m0) * nP2(n + m0) * true * P0))(zh) |
((nP(n + n0) * P))(zh), ((nP2(n + m0) * true * P0 * nP ⊗_(n, m0)))(zh), ((nP ⊗_(n, m0) * nP(n + m0) * P0))(zh), n0 < m0, ∀ n0, P. ¬ m0 < n0 ∧ ((nP(n + n0) * P))(zh) → ((nP2(n + n0) * true * P))(zh) ⊦ ((nP2(n + n0) * true * P))(zh), ((nP2 ⊗_(n, m0) * nP2(n + m0) * true * P0))(zh)
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic% ⊦ true * true = true; (s)% ⊦ ((P1 * P2))(zh) → ((true * P2))(zh); (s)%sep-com: ⊦ P * P2 = P2 * P; from specification heap-sep[zheap]%sep-ass: ⊦ (P * P3) * P4 = P * P3 * P4; from specification heap-sep[zheap]