| (m + nused0) + 1 < BRANCH_SIZE, n < BRANCH_SIZE, m + nused0 < n, m + nused0 + 1 < BRANCH_SIZE, m + nused0 < BRANCH_SIZE, ∀ m, n, zbrar. m + nused0 < BRANCH_SIZE ∧ n < BRANCH_SIZE ∧ m + nused0 ≤ n → save(zbrar, m, nused0)[n] = mkbrarray(BRANCH_SIZE)[n] ⊦ save(zbrar, m + 1, nused0)[m, save(zbrar[m])][n] = mkbrarray(BRANCH_SIZE)[n] |
m + nused0 < BRANCH_SIZE, m + nused0 + 1 < BRANCH_SIZE, m + nused0 < n, n < BRANCH_SIZE, (m + nused0) + 1 < BRANCH_SIZE, ∀ m, n, zbrar. m + nused0 < BRANCH_SIZE ∧ n < BRANCH_SIZE ∧ m + nused0 ≤ n → save(zbrar, m, nused0)[n] = mkbrarray(BRANCH_SIZE)[n] ⊦ save(zbrar, m + 1, nused0)[n] = mkbrarray(BRANCH_SIZE)[n]
Used simplifier rules: ⊦ m + m0 < n → brar[m, br][n] = brar[n]; (s)%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic