| # ndx = # gndx1 + 1, gndx1[m3] = mkgnode(nd2, m1, boolvar, boolvar3), (gndx1 + mkgnode(nd, n, false, false) ')[m3] = mkgnode(nd3, m2, true, boolvar6), (mkgnode(nd0, m, true, boolvar0) ' + gndx1 + mkgnode(nd, n, false, false) ')[n1] = mkgnode(nd1, m0, boolvar1, boolvar2), m3 < # ndx, m3 ≤ # gndx1, m3 < # gndx1 → ¬ boolvar3, m3 < # gndx1 → ¬ boolvar, ∀ n2. ¬ # gndx1 < n2 → (mkgnode(nd0, m, true, boolvar0) ' + gndx1)[n2].nd = (ndx + nd ' + ndx1)[n2] ⊦ ndx = [], ndx1 = [] |
⊦ ¬ n < # gndx → (gndx + gndx0)[n] = gndx0[n - # gndx]
Used simplifier rules: ⊦ m < n ↔ ¬ n ≤ m; (ss)% ⊦ m ≤ n → (n ≤ m ↔ m = n); (s)%lf-02: ⊦ m < n ∧ m = n0 → n0 < n; (forward) from specification nat-basic% ⊦ m - m = 0; (s)% ⊦ gnd '[0] = gnd; (s)%⊦ mkgnode(nd, m, boolvar, boolvar0) = mkgnode(nd0, m0, boolvar1, boolvar2) ↔ nd = nd0 ∧ m = m0 ∧ (boolvar ↔ boolvar1) ∧ (boolvar0 ↔ boolvar2); (ws)% ⊦ n < # gndx → (gndx + gnd ')[n] = gndx[n]; (s)%a: ⊦ (gndx + gndx0) + gndx1 = gndx + gndx0 + gndx1; from specification list[group-store]% ⊦ m < n → m ≤ n; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic Used terms: m3, mkgnode(nd, n, false, false) ', gndx1