[Imprint]
[Data Privacy Statement]
[E-Mail]
View
long theorem info
. View
the proof
. Back to
main index
. View
the specification
. View
theorem base summary
, View
theorem base listing
, the
used properties by spec
, the
dependency list
, the
symbol table
,
Theorem unmodified-load-adr-node
⊦ iast[adr] = indexnode(brar, bv0, m) ∧ n ≤ nused ∧ nused < BRANCH_SIZE ∧ unmodified(adr, mkznode(rp, zbrar, bv1, false, nused + 1), iast) → load(brar[n]).adr = zbrar[n].adr
Type: A user defined theorem
Validity: The proof is valid.
Features: s, ls,
Comment:
Used by:
Used by units in proved state:
Proof exists?: Yes
View
the proof
Infos about the proof
Proved?: Yes
Interactions: 2
Proof steps: 5
Used lemmas:
unmodified
,
Used spec theorems:
znode-ops
/
save-node
Used simplifier rules:
nat-basic
/
eq-01
constants
/
branchsize-0
nat-basic
/
f
nat
/
fle-01
znode-ops
/
save-properties
znode
/
sel-04
znode-ops
/
at-save-0
nat
/
succ-01
nat-basic
/
c
nat-basic
/
a
nat
/
le-ls-simp
nat-basic
/
s-04
indexnode
/
inj-05
znode
/
sel-03
znode
/
sel-05
znode
/
sel-02
znode-ops
/
save-entry
znode-ops
/
load-entry
zbranch
/
sel-08
znode-ops
/
save-branch
znode-ops
/
load-branch
zbranch
/
sel-03