| sdt0[str0][p0] = dnode(md, sdt), q = ε, q ∈ dnode(md0, sdt0)[str0 ' + p0, dnode(md, sdt[str, tree0])], p0 ∈ sdt0[str0], str0 ∈ sdt0, ∀ md0, sdt0, md, sdt, q, str, tree0. dnode(md0, sdt0)[p0] = dnode(md, sdt) ∧ p0 ∈ dnode(md0, sdt0) ∧ q ∈ dnode(md0, sdt0)[p0, dnode(md, sdt[str, tree0])] → dnode(md0, sdt0)[p0, dnode(md, sdt[str, tree0])][q] = (p0 + str ' ⊑ q ⊃ tree0[restn(# p0, q.tail)];(q ⊑ p0 ⊃ dnode(md0, sdt0)[q][restn(# q, p0) + str ', tree0];dnode(md0, sdt0)[q])) ⊦ dnode(md0, sdt0)[str0 ' + p0, dnode(md, sdt[str, tree0])][q] = ((str0 ' + p0) + str ' ⊑ q ⊃ tree0[restn(# p0 + 1, q.tail)] ;(q ⊑ str0 ' + p0 ⊃ dnode(md0, sdt0)[q][restn(# q, str0 ' + p0) + str ', tree0];dnode(md0, sdt0)[q]) ) |
⊦ tree[ε] = tree
p ≠ ε ⊦ str ∈ sdt → dnode(md, sdt)[str ' + p, tree0] = dnode(md, sdt[str, sdt[str][p, tree0]])
⊦ p ∈ tree → tree[p + q, tree0] = tree[p, tree[p][q, tree0]]
⊦ ε ∈ tree
⊦ dnode(md, sdt)[str ', tree0] = dnode(md, sdt[str, tree0])
sdt0[str0][p0] = dnode(md, sdt), p0 ∈ sdt0[str0], str0 ∈ sdt0, ∀ md0, sdt0, md, sdt, q, str, tree0. dnode(md0, sdt0)[p0] = dnode(md, sdt) ∧ p0 ∈ dnode(md0, sdt0) ∧ q ∈ dnode(md0, sdt0)[p0, dnode(md, sdt[str, tree0])] → dnode(md0, sdt0)[p0, dnode(md, sdt[str, tree0])][q] = (p0 + str ' ⊑ q ⊃ tree0[restn(# p0, q.tail)];(q ⊑ p0 ⊃ dnode(md0, sdt0)[q][restn(# q, p0) + str ', tree0];dnode(md0, sdt0)[q])) ⊦ dnode(md0, sdt0)[str0 ' + p0, dnode(md, sdt[str, tree0])] = dnode(md0, sdt0[str0, sdt0[str0][p0, dnode(md, sdt[str, tree0])]])
Used simplifier rules: nil-at: ⊦ tree[ε] = tree;%put-rec: p ≠ ε ⊦ str ∈ sdt → dnode(md, sdt)[str ' + p, tree0] = dnode(md, sdt[str, sdt[str][p, tree0]]);%split-put: ⊦ p ∈ tree → tree[p + q, tree0] = tree[p, tree[p][q, tree0]];%nil-in: ⊦ ε ∈ tree;%put-here: ⊦ dnode(md, sdt)[str ', tree0] = dnode(md, sdt[str, tree0]);% ⊦ p + str ' ≠ ε; (s)% ⊦ restn(0, p) = p; (s)% ⊦ # ε = 0; (s)% ⊦ ε ⊑ p; (s)%a: ⊦ (p + p0) + p1 = p + p0 + p1; from specification list[path]% ⊦ str ' + p ≠ ε; (s)% ⊦ p ⊑ ε ↔ p = ε; (s)