[Imprint]
[Data Privacy Statement]
[E-Mail]
View
long theorem info
. View
the proof
. Back to
main index
. View
the specification
. View
theorem base summary
, View
theorem base listing
, the
used properties by spec
, the
dependency list
, the
symbol table
,
Theorem unmodified-sorted-leaf
⊦ iast[adr] = indexnode(brar, bv0, m) ∧ nused ≤ BRANCH_SIZE ∧ BRANCH_SIZE = # zbrar ∧ unmodified(adr, mkznode(rp, zbrar, bv1, false, nused), iast) → (sorted(load(brar, 0, nused), 0, nused) ↔ sorted(zbrar, 0, nused))
Type: A user defined theorem
Validity: The proof is valid.
Features: s, ls,
Comment:
Used by:
Used by units in proved state:
Proof exists?: Yes
View
the proof
Infos about the proof
Proved?: Yes
Interactions: 3
Proof steps: 9
Used lemmas:
unmodified
,
Used spec theorems:
zbranch-array-sorted
/
sorted-all
znode-ops
/
save-node
Used simplifier rules:
znode-ops
/
save-properties
znode
/
sel-04
nat
/
le-ls-simp
znode-ops
/
at-load-0
znode-ops
/
load-size
nat
/
le-def
nat-basic
/
lf-02
oelem
/nat-set/
irreflexivity
nat-basic
/
c
nat-basic
/
a
nat-basic
/
add-base
constants
/
branchsize-0
nat-basic
/
lf-01
nat-basic
/
succ
znode-ops
/
load-save-key
znode-ops
/
at-save-0
nat-basic
/
ls-02
oelem
/nat-set/
transitivity
nat-basic
/
lf
nat
/
fle
nat-basic
/
f
nat
/
fle-01
nat
/
lels
indexnode
/
inj-05
znode
/
sel-03
znode
/
sel-05
znode
/
sel-02