| x.last = (H[r].nxt ' + x0).last, path(H[r].nxt ' + x0, H), r ∈ H, path(H[r].nxt ' + x, H), ∃ x1, x2. x = x1 + r ' + x2 ∧ ¬ r ∈ x2, ∀ r, H. path(r ' + x0, H) → (∃ x1. path(r ' + x1, H) ∧ (r ' + x1).last = (r ' + x0).last ∧ ¬ r ∈ x1 ∧ ¬ dups(x1)) ⊦ r = null, r = H[r].nxt, dups(x), H[r].nxt ∈ x, ∃ x. path(r ' + x, H) ∧ (r ' + x).last = (H[r].nxt ' + x0).last ∧ ¬ r ∈ x ∧ ¬ dups(x) |
(r ' + x1).last = (H[r].nxt ' + x0).last, path(H[r].nxt ' + x0, H), r ∈ H, path(H[r].nxt ' + x2 + r ' + x1, H), ∀ r, H. path(r ' + x0, H) → (∃ x1. path(r ' + x1, H) ∧ (r ' + x1).last = (r ' + x0).last ∧ ¬ r ∈ x1 ∧ ¬ dups(x1)) ⊦ r = null, r = H[r].nxt, r ∈ x1, r ∈ x2, dups(x2 + x1), H[r].nxt ∈ x2, H[r].nxt ∈ x1, dups(x2), dups(x1), ∃ x. path(r ' + x, H) ∧ (r ' + x).last = (r ' + x1).last ∧ ¬ r ∈ x ∧ ¬ dups(x)
Used simplifier rules: a: ⊦ ¬ dups(x0 + x1) → ¬ dups(x0) ∧ ¬ dups(x1); (forward) from specification list-dup[reflist]%in-01: ⊦ r ≠ r0 → (r ∈ r0 ' + x0 ↔ r ∈ x0); from specification list[reflist]%in-append: ⊦ r ∈ x0 + x1 ↔ ¬ ¬(r ∈ x0 ∨ r ∈ x1); from specification list[reflist]%f-01: ⊦ dups(x0 + r ' + x1) ↔ r ∈ x0 ∨ r ∈ x1 ∨ dups(x0 + x1); from specification list-dup[reflist]%a: ⊦ (x0 + x1) + x2 = x0 + x1 + x2; from specification list[reflist]%lapp-01: ⊦ (x0 + r ' + x1).last = (r ' + x1).last; from specification list-last[reflist]