| # ax0 + 1 = # ndx, ∀ ndx, fs, adr. # ax0 = # ndx → fs[ax0, ndx][adr] = fs[adr] ∨ adr ∈ ax0 ⊦ fs[adr0 ' + ax0, ndx][adr] = fs[adr], adr = adr0, adr ∈ ax0 |
# ax0 + 1 = # ndx, ndx = nd + ndx0, ∀ ndx, fs, adr. # ax0 = # ndx → fs[ax0, ndx][adr] = fs[adr] ∨ adr ∈ ax0 ⊦ fs[adr0 ' + ax0, ndx][adr] = fs[adr], adr = adr0, adr ∈ ax0
Used simplifier rules: node-list freely generated by [], +;;% ⊦ # [] = 0; (s)% ⊦ m + n = 0 ↔ m = 0 ∧ n = 0; (ws)% ⊦ # ax = 0 ↔ ax = []; (s)%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic%c: ⊦ m + n = n + m; from specification nat-basic