| n < # wlar, bflipset-cons(bflipset, subarray(wlar, 0, n)) ⊦ bflipset-cons(bflipset ++ n, subarray(wlar[n, wl-entry(m0, used)], 0, n + 1)) |
n < # wlar, ∀ n0. n0 ∈ bflipset → n0 < n ∧ wlar[n0].status = used, n0 = n ∨ n0 ∈ bflipset ⊦ ¬ n < n0 ∧ wlar[n, wl-entry(m0, used)][n0].status = used
Used simplifier rules: bflipset-cons: ⊦ bflipset-cons(bflipset, wlar) ↔ (∀ n. n ∈ bflipset → n < # wlar ∧ wlar[n].status = used);%ls-at-subarray-wlar: n0 ≤ # wlar, n1 < n0 ⊦ subarray(wlar, 0, n0)[n1] = wlar[n1];% ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic% ⊦ m + 1 ≤ n ↔ m < n; (s)% ⊦ # wlar[n, wle] = # wlar; (s)%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ m < n + 1 ↔ ¬ n < m; (s)% ⊦ n ∈ ns ++ n0 ↔ n = n0 ∨ n ∈ ns; (s)% ⊦ m < n → m ≤ n; (s)% ⊦ # subarray(wlar, m, n) = n; (s)