| n0 + nused0 + 1 < # zbrar, n0 + 1 < # zbrar, ∀ n, zbrar. n + nused0 < # zbrar → payload(copy(zbrar, n, zbrar, n + 1, nused0), n + 1, nused0) = payload(zbrar, n, nused0) ⊦ (zbrar[n0].entry? ⊃ payload(copy(zbrar, n0 + 1, zbrar, (n0 + 1) + 1, nused0)[n0 + 1, zbrar[n0]], 2 + n0, nused0)[zbrar[n0].key, zbrar[n0].adr] ;payload(copy(zbrar, n0 + 1, zbrar, (n0 + 1) + 1, nused0)[n0 + 1, zbrar[n0]], 2 + n0, nused0) ) = payload(zbrar, n0, nused0 + 1) |
n0 + 1 < # zbrar, n0 + nused0 + 1 < # zbrar, ∀ n, zbrar. n + nused0 < # zbrar → payload(copy(zbrar, n, zbrar, n + 1, nused0), n + 1, nused0) = payload(zbrar, n, nused0) ⊦ (zbrar[n0].entry? ⊃ payload(copy(zbrar, n0 + 1, zbrar, 2 + n0, nused0)[n0 + 1, zbrar[n0]], 2 + n0, nused0)[zbrar[n0].key, zbrar[n0].adr] ;payload(copy(zbrar, n0 + 1, zbrar, 2 + n0, nused0)[n0 + 1, zbrar[n0]], 2 + n0, nused0) ) = payload(zbrar, n0, nused0 + 1)
Used simplifier rules: c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic