| pos(char1, char + str0) = pos(char2, char + str0), pos(char2, char + str0) < #(char + str0), ∀ char1, char2. pos(char1, str0) = pos(char2, str0) ∧ pos(char2, str0) < # str0 → char1 = char2 ∨ str0 = "" ⊦ char + str0 = "", char1 = char2 |
pos(char1, char ' + str0) = pos(char2, char ' + str0), pos(char2, char ' + str0) ≤ # str0, ∀ char1, char2. pos(char1, str0) = pos(char2, str0) ∧ pos(char2, str0) < # str0 → char1 = char2 ∨ str0 = "" ⊦ char1 = char2
Used simplifier rules: length-one: ⊦ # char ' = 1;% ⊦ m < n ↔ ¬ n ≤ m; (ss)%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ m < n + 1 ↔ ¬ n < m; (s)% ⊦ #(str + str0) = # str + # str0; (s)%a: ⊦ (str + str0) + str1 = str + str0 + str1; from specification list[string]% ⊦ char ' + str ≠ ""; (s)% ⊦ char + str = char ' + str; (s)