| # ax = 1 + # kx1, ax = adr + ax0 ⊦ ri[key ' + kx1, ax][key] = ax[0], key ∈ kx1 |
# ax0 = # kx1 ⊦ ri[key, adr][kx1, ax0][key] = adr, key ∈ kx1
Used simplifier rules: index-update-key-rec: ⊦ ri[key ' + kx, adr ' + ax] = ri[key, adr][kx, ax];% ⊦ (adr ' + ax)[0] = adr; (s)%a: ⊦ (kx + kx0) + kx1 = kx + kx0 + kx1; from specification list[key-list-set]%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ m + n = m + n0 ↔ n = n0; (s)%a: ⊦ (ax + ax0) + ax1 = ax + ax0 + ax1; from specification list[address-list-set]% ⊦ m +1 = m + 1; (s)% ⊦ #(adr ' + ax) = (# ax)+1; (s)% ⊦ adr + ax = adr ' + ax; (s)