| # ax2 = # gndx2, # lax = # gndx0 + # gndx2 + 1, lax.to-adr(lnum) = ax + adr1 ' + ax2, jvalid ↔ nd.key ∈ ri, gstore2[lnum] = groupblock(gndx0 + mkgnode(nd, m0, boolvar, boolvar0) ' + gndx2, lax, m), ri[nd.key] = adr1, err = ESUCCESS, err = err0, jvalid, ndx = nodes(gstore2 ↓, ginval)[referenced-adrs(ax, ri)], inv(gstore2 \ ginval), inv(groupblock(gndx0 + mkgnode(nd, m0, boolvar, boolvar0) ' + gndx2, lax, m)), ri-cons(ri, nodes(gstore2 ↓, ginval)), lnum ∈ gstore2, nd.key ∈ ri, err = ESUCCESS → jvalid → nd.key ∈ ri, ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ ⟪ax := adr1 ' + ax2; gndx1 := gndx0 + mkgnode(nd, m0, boolvar, boolvar0) ' + gndx2; gndx := mkgnode(nd, m0, boolvar, boolvar0) ' + gndx2; if err = ESUCCESS then {ax := ax.tail; gndx := gndx.tail}⟫ ( (err = ESUCCESS ∨ ⌊err⌋ ) ∧ ( err = ESUCCESS → (∃ ax0, gndx0. lax.to-adr(lnum) = ax0 + ax ∧ gndx1 = gndx0 + gndx ∧ # ax = # gndx ∧ ndx + nd ' = nodes(gstore2 ↓, ginval)[referenced-adrs(ax0, ri)])) ∧ ¬ # ax2 < (err = ESUCCESS ⊃ # ax;0)), lnum ∈ ginval |
# lax = # gndx0 + # gndx2 + 1, # ax2 = # gndx2, lax.to-adr(lnum) = ax1 + adr1 ' + ax2, jvalid ↔ nd.key ∈ ri, ri[nd.key] = adr1, gstore2[lnum] = groupblock(gndx0 + mkgnode(nd, m0, boolvar, boolvar0) ' + gndx2, lax, m), ax = adr1 ' + ax2, err = err0, err = ESUCCESS, jvalid, ndx = nodes(gstore2 ↓, ginval)[referenced-adrs(ax1, ri)], inv(groupblock(gndx0 + mkgnode(nd, m0, boolvar, boolvar0) ' + gndx2, lax, m)), inv(gstore2 \ ginval), ri-cons(ri, nodes(gstore2 ↓, ginval)), nd.key ∈ ri, lnum ∈ gstore2, err = ESUCCESS → jvalid → nd.key ∈ ri, ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ ⟪gndx1 := gndx0 + mkgnode(nd, m0, boolvar, boolvar0) ' + gndx2; gndx := mkgnode(nd, m0, boolvar, boolvar0) ' + gndx2; if err = ESUCCESS then {ax := ax.tail; gndx := gndx.tail}⟫ ( (err = ESUCCESS ∨ ⌊err⌋ ) ∧ ( err = ESUCCESS → (∃ ax0, gndx0. lax.to-adr(lnum) = ax0 + ax ∧ gndx1 = gndx0 + gndx ∧ # ax = # gndx ∧ ndx + nd ' = nodes(gstore2 ↓, ginval)[referenced-adrs(ax0, ri)])) ∧ ¬ # ax2 < (err = ESUCCESS ⊃ # ax;0)), lnum ∈ ginval