| lpt[n, mklp(m, m0, lpf0, m1)][n] = mklp(m6, m7, lpf2, m8), istore[n] = indexblock(indx, lax, m2), lpt[n] = mklp(m3, m4, lpf1, m5), n < # lpt, n ∈ istore, ∀ n. (n < # lpt ∧ lpt[n].flags = LP_INDEX_NODES ↔ n ∈ istore) ∧ (n ∈ istore → abs-leb(avol[n], istore[n], lpt[n]) ∧ lpt[n].ref-size = istore[n].ref-size) ⊦ lpf0 = LP_INDEX_NODES, lpf1 = LP_INDEX_NODES, n < # lpt ∧ lpf2 = LP_INDEX_NODES ∧ abs-leb(avol[n], indexblock(indx, lax, m2), mklp(m2, m4, lpf1, m5)) ∧ m3 = m2 |
istore[n] = indexblock(indx, lax, m2), lpt[n] = mklp(m3, m4, lpf1, m5), n < # lpt, n ∈ istore, ∀ n. (n < # lpt ∧ lpt[n].flags = LP_INDEX_NODES ↔ n ∈ istore) ∧ (n ∈ istore → abs-leb(avol[n], istore[n], lpt[n]) ∧ lpt[n].ref-size = istore[n].ref-size) ⊦ lpf0 = LP_INDEX_NODES, lpf1 = LP_INDEX_NODES
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic%⊦ mklp(m, m0, lpf, m1) = mklp(m2, m3, lpf0, m4) ↔ m = m2 ∧ m0 = m3 ∧ lpf = lpf0 ∧ m1 = m4; (ws)% ⊦ m < # lpt → lpt[m, lp][m] = lp; (s)