| x = r + x1 ∧ x ≠ [], # x = 2, path(x, H) ⊦ r ≠ null ∧ H[r].nxt ≠ null ∧ r ∈ H ∧ H[r].nxt ∈ H ∧ H[r].nxt = x.last |
1 = # x1, path(r ' + x1, H) ⊦ r = null, H[r].nxt = hd x1 ∧ H[r].nxt ∈ H ∧ H[r].nxt ≠ null
Used simplifier rules: path-first-in-H: ⊦ path(r ' + x, H) → (¬ r ∈ H ↔ false);%null-not-start-of-path: ⊦ ¬ path(null ' + x, H);%last-one: ⊦ # x0 = 1 → (x1 + x0).last = hd x0; from specification list-last[reflist]%e-01: ⊦ r ' + x0 ≠ []; from specification list[reflist]%c: ⊦ m + n = n + m; from specification nat-basic2%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic2%add-num-04: n0 < n ⊦ (* n) = m0 + (* n0) ↔ n - n0 = m0; from specification nat%a: ⊦ (x0 + x1) + x2 = x0 + x1 + x2; from specification list[reflist]%len-02: ⊦ # r ' = 0 +1; from specification list[reflist]%len: ⊦ #(x0 + x1) = # x0 + # x1; from specification list[reflist]%c: ⊦ r + x0 = r ' + x0; from specification list[reflist]