| # ax0 + 1 = # kx, new(ax0, fs), key ∈ ri, kx.toSet ⊆ dom ri, ∀ key. key ∈ ri → ri[key] ∈ fs ∧ key-cons(key, fs[ri[key]]), ∀ kx0, fs0, key0, ri0. # ax0 = # kx0 ∧ new(ax0, fs0) ∧ key0 ∈ ri0 ∧ kx0.toSet ⊆ dom ri0 ∧ (∀ key. key ∈ ri0 → ri0[key] ∈ fs0 ∧ key-cons(key, fs0[ri0[key]])) → fs0[ax0, fs0[ri0[kx0]]][ri0[kx0, ax0][key0]] = fs0[ri0[key0]] ∨ dups(kx0) ⊦ fs[adr ' + ax0, fs[ri[kx]]][ri[kx, adr ' + ax0][key]] = fs[ri[key]], dups(kx), dups(ax0), adr ∈ fs, adr ∈ ax0 |
# ax0 + 1 = # kx, kx = key1 + kx1, new(ax0, fs), key ∈ ri, kx.toSet ⊆ dom ri, ∀ kx0, fs0, key0, ri0. # ax0 = # kx0 ∧ new(ax0, fs0) ∧ key0 ∈ ri0 ∧ kx0.toSet ⊆ dom ri0 ∧ (∀ key. key ∈ ri0 → ri0[key] ∈ fs0 ∧ key-cons(key, fs0[ri0[key]])) → fs0[ax0, fs0[ri0[kx0]]][ri0[kx0, ax0][key0]] = fs0[ri0[key0]] ∨ dups(kx0), ∀ key. key ∈ ri → ri[key] ∈ fs ∧ key-cons(key, fs[ri[key]]) ⊦ fs[adr ' + ax0, fs[ri[kx]]][ri[kx, adr ' + ax0][key]] = fs[ri[key]], dups(ax0), dups(kx), adr ∈ ax0, adr ∈ fs
Used simplifier rules: key-list freely generated by [], +;;% ⊦ # [] = 0; (s)% ⊦ m + n = 0 ↔ m = 0 ∧ n = 0; (ws)% ⊦ # ax = 0 ↔ ax = []; (s)%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic%c: ⊦ m + n = n + m; from specification nat-basic