| ∀ ndx1. key-cons(ndx + ndx1) ↔ key-cons(ndx) ∧ key-cons(ndx1) ⊦ key-cons((nd + ndx) + ndx1) ↔ key-cons(nd + ndx) ∧ key-cons(ndx1) |
key-cons(nd.key, nd), ∀ ndx1. key-cons(ndx + ndx1) ↔ key-cons(ndx) ∧ key-cons(ndx1) ⊦ key-cons(ndx + ndx1) ↔ key-cons(ndx) ∧ key-cons(ndx1)
Used simplifier rules: key-cons-rec: ⊦ key-cons(nd ' + ndx) ↔ ¬ ¬(key-cons(nd.key, nd) ∧ key-cons(ndx));%a: ⊦ (ndx + ndx0) + ndx1 = ndx + ndx0 + ndx1; from specification list[node-list]% ⊦ nd + ndx = nd ' + ndx; (s)