| # ax0 + 1 = # ndx, ∀ ndx0, adr1, fs0. # ax0 = # ndx0 ∧ adr1 ∈ ax0 → fs0[ax0, ndx0][adr1] = ndx0[pos(adr1, ax0)], adr = adr0 ∨ adr ∈ ax0 ⊦ fs[adr0 ' + ax0, ndx][adr] = ndx[pos(adr, adr0 ' + ax0)], dups(ax0), adr0 ∈ ax0 |
# ax0 + 1 = # ndx, ndx = nd + ndx1, ∀ ndx0, adr1, fs0. # ax0 = # ndx0 ∧ adr1 ∈ ax0 → fs0[ax0, ndx0][adr1] = ndx0[pos(adr1, ax0)], adr = adr0 ∨ adr ∈ ax0 ⊦ fs[adr0 ' + ax0, ndx][adr] = ndx[pos(adr, adr0 ' + ax0)], dups(ax0), adr0 ∈ ax0
Used simplifier rules: node-list freely generated by [], +;;% ⊦ # [] = 0; (s)% ⊦ m + n = 0 ↔ m = 0 ∧ n = 0; (ws)% ⊦ # ax = 0 ↔ ax = []; (s)%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic%c: ⊦ m + n = n + m; from specification nat-basic