| vals = vals1 + val ', # vals = m + 1, ∀ st, ty, j, r, vals0. # vals0 < m + 1 → (true → (r -- j ' ∈ addarray(r, ty, vals0, st) ↔ ¬ j < 0 ∧ ¬ n→i(# vals0) ≤ j ∨ r -- j ' ∈ st)) ⊦ vals = [], r -- j ' ∈ (addarray(r, ty, vals1, st)[r -- n→i(m) ', val]) ↔ r -- j ' ∈ st ∨ ¬ j < 0 ∧ ¬ n→i(m) < j |
∀ st, ty, j, r, vals0. # vals0 < # vals1 + 1 → (true → (r -- j ' ∈ addarray(r, ty, vals0, st) ↔ ¬ j < 0 ∧ ¬ n→i(# vals0) ≤ j ∨ r -- j ' ∈ st)) ⊦ r -- j ' ∈ (addarray(r, ty, vals1, st)[r -- n→i(# vals1) ', val]) ↔ r -- j ' ∈ st ∨ ¬ j < 0 ∧ ¬ n→i(# vals1) < j
[[CONCRETESIMPRULES : ([CSIMPSEQ : ⊦ vals + val ' ≠ []], [CSIMPSEQ : ⊦ m + n = n + m], [CSIMPSEQ : ⊦ (m + n0) + n1 = m + n0 + n1], [CSIMPSEQ : ⊦ m + n = m + n0 ↔ n = n0], [CSIMPSEQ : ⊦ (vals + vals0) + vals1 = vals + vals0 + vals1], [CSIMPSEQ : ⊦ # val ' = 0 +1], [CSIMPSEQ : ⊦ # (vals + vals0) = # vals + # vals0])]]