| n < nused, n < len, n < # zbrar, sorted(zbrar, 0, nused), len ≤ # zbrar, len ≤ nused, nused ≤ # zbrar ⊦ scan(zbrar[n].key, zbrar, 0, len) = n |
⊦ sorted(zbrar, m, nused) ∧ n < len ∧ len ≤ nused ∧ m + nused ≤ # zbrar → scan(zbrar[m + n].key, zbrar, m, len) = m + n
Used simplifier rules: ⊦ n + 0 = n; (s)%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic%c: ⊦ m + n = n + m; from specification nat-basic Used terms: zbrar, 0, nused, n, len