| sdt[str][p0] = dnode(md0, sdt0), q = str0 + q0, q ∈ dnode(md, sdt)[str ' + p0, dnode(md1, sdt1)], p0 ∈ sdt[str], str ∈ sdt, ∀ md, sdt, md0, sdt0, q, md1, sdt1. dnode(md, sdt)[p0] = dnode(md0, sdt0) ∧ p0 ∈ dnode(md, sdt) ∧ q ∈ dnode(md, sdt)[p0, dnode(md1, sdt1)] → dnode(md, sdt)[p0, dnode(md1, sdt1)][q] = (q ⊑ p0 ⊃ dnode(md, sdt)[q][restn(# q, p0), dnode(md1, sdt1)];dnode(md, sdt)[p0, dnode(md0, sdt1)][q]) ⊦ dnode(md, sdt)[str ' + p0, dnode(md1, sdt1)][q] = (q ⊑ str ' + p0 ⊃ dnode(md, sdt)[q][restn(# q, str ' + p0), dnode(md1, sdt1)];dnode(md, sdt)[str ' + p0, dnode(md0, sdt1)][q]) |
⊦ p + q ∈ tree ↔ p ∈ tree ∧ q ∈ tree[p]
⊦ p ∈ tree → tree[p + q] = tree[p][q]
sdt[str][p0] = dnode(md0, sdt0), str ∈ sdt, p0 ∈ sdt[str], str0 ' ∈ dnode(md, sdt)[str ' + p0, dnode(md1, sdt1)], q0 ∈ dnode(md, sdt)[str ' + p0, dnode(md1, sdt1)][str0 '], ∀ md, sdt, md0, sdt0, q, md1, sdt1. dnode(md, sdt)[p0] = dnode(md0, sdt0) ∧ p0 ∈ dnode(md, sdt) ∧ q ∈ dnode(md, sdt)[p0, dnode(md1, sdt1)] → dnode(md, sdt)[p0, dnode(md1, sdt1)][q] = (q ⊑ p0 ⊃ dnode(md, sdt)[q][restn(# q, p0), dnode(md1, sdt1)];dnode(md, sdt)[p0, dnode(md0, sdt1)][q]) ⊦ dnode(md, sdt)[str ' + p0, dnode(md1, sdt1)][str0 '][q0] = (str0 ' + q0 ⊑ str ' + p0 ⊃ dnode(md, sdt)[str0 ' + q0][restn(# q0, p0), dnode(md1, sdt1)] ;dnode(md, sdt)[str ' + p0, dnode(md0, sdt1)][str0 ' + q0] )
Used simplifier rules: split-in: ⊦ p + q ∈ tree ↔ p ∈ tree ∧ q ∈ tree[p];%split-at: ⊦ p ∈ tree → tree[p + q] = tree[p][q];%c: ⊦ m + n = n + m; from specification nat-basic[directory-tree-inst]%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic[directory-tree-inst]% ⊦ restn(n + 1, str ' + p) = restn(n, p); (s)%a: ⊦ (p + p0) + p1 = p + p0 + p1; from specification list[path]% ⊦ m +1 = m + 1; (s)% ⊦ #(str ' + p) = (# p)+1; (s)% ⊦ str + p = str ' + p; (s)