| n = m + 1, n + 1 < # zbrar, n + 1 < nused, nused ≤ # zbrar ⊦ n = 0, ((ri |≤ key) |> zbrar[m].key) |≤ zbrar[n].key = (ri |> zbrar[m].key) |≤ zbrar[n].key, key < zbrar[n].key |
2 + m < nused, 2 + m < # zbrar, nused ≤ # zbrar ⊦ ((ri |≤ key) |> zbrar[m].key) |≤ zbrar[m + 1].key = (ri |> zbrar[m].key) |≤ zbrar[m + 1].key, key < zbrar[m + 1].key
Used simplifier rules: fle: ⊦ m < n ∧ n ≤ n0 → m < n0; (forward) from specification nat%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ m + 1 ≠ 0; (s)