| wlar[m, wl-entry(m0, used)][m1, wl-entry(m2, erasing)][n] = wl-entry(m3, stat), m1 < # wlar, m1 < m, m < # wlar, m1 + 1 < # wlar, ∀ n. n ∈ q ↔ n < m ∧ wlar[n].status = erasing ⊦ n ∈ q + eq-entry(m1, lref) ' ↔ ¬ m < n ∧ stat = erasing, n = m1 |
wlar[m, wl-entry(m0, used)][n] = wl-entry(m3, stat), m1 + 1 < # wlar, m < # wlar, m1 < m, m1 < # wlar, ∀ n. n ∈ q ↔ n < m ∧ wlar[n].status = erasing ⊦ n ∈ q ↔ ¬ m < n ∧ stat = erasing, n = m1
Used simplifier rules: a: ⊦ (q + q0) + q1 = q + q0 + q1; from specification list[erasequeue-base]% ⊦ n ≠ n0 → (n ∈ q + eq-entry(n0, lref) ' ↔ n ∈ q); (s)% ⊦ m ≠ n → wlar[n, wle][m] = wlar[m]; (s)