| # ax0 + 1 = # kx, kx = key1 + kx1, new(ax0, fs), key ∈ ri, kx.toSet ⊆ dom ri, ∀ kx0, fs0, key0, ri0. # ax0 = # kx0 ∧ new(ax0, fs0) ∧ key0 ∈ ri0 ∧ kx0.toSet ⊆ dom ri0 ∧ (∀ key. key ∈ ri0 → ri0[key] ∈ fs0 ∧ key-cons(key, fs0[ri0[key]])) → fs0[ax0, fs0[ri0[kx0]]][ri0[kx0, ax0][key0]] = fs0[ri0[key0]] ∨ dups(kx0), ∀ key. key ∈ ri → ri[key] ∈ fs ∧ key-cons(key, fs[ri[key]]) ⊦ fs[adr ' + ax0, fs[ri[kx]]][ri[kx, adr ' + ax0][key]] = fs[ri[key]], dups(ax0), dups(kx), adr ∈ ax0, adr ∈ fs |
# ax0 = # kx1, new(ax0, fs), key ∈ ri, key1 ∈ ri, kx1.toSet ⊆ dom ri, ∀ key. key ∈ ri → ri[key] ∈ fs ∧ key-cons(key, fs[ri[key]]), ∀ kx0, fs0, key0, ri0. # kx1 = # kx0 ∧ new(ax0, fs0) ∧ key0 ∈ ri0 ∧ kx0.toSet ⊆ dom ri0 ∧ (∀ key. key ∈ ri0 → ri0[key] ∈ fs0 ∧ key-cons(key, fs0[ri0[key]])) → fs0[ax0, fs0[ri0[kx0]]][ri0[kx0, ax0][key0]] = fs0[ri0[key0]] ∨ dups(kx0) ⊦ fs[adr, fs[ri[key1]]][ax0, fs[ri[kx1]]][ri[key1, adr][kx1, ax0][key]] = fs[ri[key]], dups(ax0), dups(kx1), adr ∈ fs, adr ∈ ax0, key1 ∈ kx1
Used simplifier rules: ⊦ dups(key ' + kx) ↔ dups(kx) ∨ key ∈ kx; (ws)% ⊦ key ∈ dom ri ↔ key ∈ ri; (s)% ⊦ ks ++ key ⊆ ks0 ↔ ks ⊆ ks0 ∧ key ∈ ks0; (ws)%unc: ⊦ ks ∪ ks0 = ks0 ∪ ks; from specification set-union[node-index]%una: ⊦ (ks ∪ ks0) ∪ ks1 = ks ∪ ks0 ∪ ks1; from specification set-union[node-index]% ⊦ ks ∪ ∅ = ks; (s)% ⊦ (ks ++ key) ∪ ks0 = (ks ∪ ks0) ++ key; (s)% ⊦ key '.toSet = ∅ ++ key; (s)% ⊦ (kx + kx0).toSet = kx.toSet ∪ kx0.toSet; (s)% ⊦ ri[key ' + kx, adr ' + ax] = ri[key, adr][kx, ax]; (s)%a: ⊦ (ndx + ndx0) + ndx1 = ndx + ndx0 + ndx1; from specification list[node-list]% ⊦ fs[adr ' + ax, nd ' + ndx] = fs[adr, nd][ax, ndx]; (s)%a: ⊦ (ax + ax0) + ax1 = ax + ax0 + ax1; from specification list[address-list-set]% ⊦ nd + ndx = nd ' + ndx; (s)% ⊦ fs[adr ' + ax] = fs[adr] + fs[ax]; (s)% ⊦ adr + ax = adr ' + ax; (s)% ⊦ ri[key ' + kx] = ri[key] + ri[kx]; (s)%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ m + n = m + n0 ↔ n = n0; (s)%a: ⊦ (kx + kx0) + kx1 = kx + kx0 + kx1; from specification list[key-list-set]% ⊦ m +1 = m + 1; (s)% ⊦ #(key ' + kx) = (# kx)+1; (s)% ⊦ key + kx = key ' + kx; (s)