| ((del-list(to_delete, n) * P))(H) ⊦ ∀ H, to_delete. (1 ≤ n → ((del-list(to_delete, n - 1) * P))(H)) ∧ (n = 0 → to_delete = [] ∧ P(H)) → ⟪tree_buffer_heap_process_one#(; H, to_delete)⟫ ((2 ≤ n → ((del-list(to_delete, n - 2) * P))(H)) ∧ (n < 2 → to_delete = [] ∧ P(H))) |
((del-list(to_delete, n) * P))(H), 1 ≤ n → ((del-list(to_delete0, n - 1) * P))(H0), n = 0 → to_delete0 = [] ∧ P(H0) ⊦ ⟪tree_buffer_heap_process_one#(; H0, to_delete0)⟫ ((2 ≤ n → ((del-list(to_delete0, n - 2) * P))(H0)) ∧ (n < 2 → to_delete0 = [] ∧ P(H0)))