| # ax0 + 1 = # ndx, ∀ ndx, fs, adr, nd. # ax0 = # ndx → fs[adr, nd][ax0, ndx] = fs[ax0, ndx][adr, nd] ∨ adr ∈ ax0 ⊦ fs[adr, nd][adr0 ' + ax0, ndx] = fs[adr0 ' + ax0, ndx][adr, nd], adr = adr0, adr ∈ ax0 |
# ax0 + 1 = # ndx, ndx = nd0 + ndx0, ∀ ndx, fs, adr, nd. # ax0 = # ndx → fs[adr, nd][ax0, ndx] = fs[ax0, ndx][adr, nd] ∨ adr ∈ ax0 ⊦ fs[adr, nd][adr0 ' + ax0, ndx] = fs[adr0 ' + ax0, ndx][adr, nd], adr = adr0, adr ∈ ax0
Used simplifier rules: node-list freely generated by [], +;;% ⊦ # [] = 0; (s)% ⊦ m + n = 0 ↔ m = 0 ∧ n = 0; (ws)% ⊦ # ax = 0 ↔ ax = []; (s)%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic%c: ⊦ m + n = n + m; from specification nat-basic