| zbrar[m0] = mkzentry(key, adr0), m0 < m, m1 < m, sorted(zbrar, 0, m), m ≤ # zbrar ⊦ zbrar[m1] = mkzentry(key, adr1) ↔ m0 = m1 ∧ adr0 = adr1 |
zbrar[m0] = mkzentry(key, adr0), zbrar[m1] = mkzentry(key, adr1), m1 < m, m0 < m, m1 < # zbrar, m0 < # zbrar, sorted(zbrar, 0, m), m ≤ # zbrar ⊦ m0 = m1 ∧ adr0 = adr1
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%fle: ⊦ m < n ∧ n ≤ n0 → m < n0; (forward) from specification nat%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic