| # lpt = # avol1, # avol0 = # avol1, n < # avol1 ∧ lpf0 = LP_INDEX_NODES ↔ n ∈ istore, lpt[n] = mklp(m4, m5, lpf0, m6), remove-refsize0(istore)[n] = indexblock(indx, lax, m), lpt.map(λ lp. (lp.ref-size = 0 ∧ lp.flags ≠ LP_FREE ⊃ mklp(0, 0, LP_FREE, lp.gcheapidx);lp))[n] = mklp(m0, m1, lpf, m2), istore[n] = indexblock(indx0, lax0, m3), n < # avol1, n ∈ istore → abs-leb(avol0[n], indexblock(indx0, lax0, m3), mklp(m3, m5, lpf0, m6)) ∧ m4 = m3, ∀ n. n < # avol1 ∧ (lpt[n].ref-size ≠ 0 ∨ lpt[n].flags = LP_FREE) → avol0[n] = avol1[n], ¬(n < # avol1 ∧ lpf = LP_INDEX_NODES ↔ n ∈ remove-refsize0(istore)) ∨ ¬(n ∈ remove-refsize0(istore) → abs-leb(avol1[n], indexblock(indx, lax, m), mklp(m, m1, lpf, m2)) ∧ m0 = m) ⊦ |
# lpt = # avol1, # avol0 = # avol1, lpf0 = LP_INDEX_NODES ↔ n ∈ istore, lpt[n] = mklp(m4, m5, lpf0, m6), remove-refsize0(istore)[n] = indexblock(indx, lax, m), lpt.map(λ lp. (lp.ref-size = 0 ∧ lp.flags ≠ LP_FREE ⊃ mklp(0, 0, LP_FREE, lp.gcheapidx);lp))[n] = mklp(m0, m1, lpf, m2), istore[n] = indexblock(indx0, lax0, m3), n < # avol1, n ∈ istore → abs-leb(avol0[n], indexblock(indx0, lax0, m3), mklp(m3, m5, lpf0, m6)) ∧ m4 = m3, ∀ n. n < # avol1 ∧ (lpt[n].ref-size ≠ 0 ∨ lpt[n].flags = LP_FREE) → avol0[n] = avol1[n], ¬(lpf = LP_INDEX_NODES ↔ n ∈ remove-refsize0(istore)) ∨ ¬(n ∈ remove-refsize0(istore) → abs-leb(avol1[n], indexblock(indx, lax, m), mklp(m, m1, lpf, m2)) ∧ m0 = m) ⊦
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%lf-01: ⊦ m < n ∧ n = n0 → m < n0; (forward) from specification nat-basic%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic