| ⊦ ( (# gs.ar ≠ 0 ∧ htok(gs.ar)) ∧ allslotsfull(gs.ar, ls.n0, ls.n, ls.e, true) ∧ ls.n < # gs.ar ∧ ls.e ≠ ⊥ ∧ ls.sz = # gs.ar ∧ (ls.n0 < # gs.ar ∧ ls.n0 = get_hash(ls.e, ls.sz)) ∧ ¬ ls.b) ∧ pre(gs, ls, I17, a) ∧ pcstepf(gs, ls, I17, a) = I20 → (# gstepf(gs, ls, I17, a).ar ≠ 0 ∧ htok(gstepf(gs, ls, I17, a).ar)) ∧ allslotsfull(gstepf(gs, ls, I17, a).ar, lstepf(gs, ls, I17, a).n0, lstepf(gs, ls, I17, a).n, lstepf(gs, ls, I17, a).e, false) ∧ lstepf(gs, ls, I17, a).n ≠ lstepf(gs, ls, I17, a).n0 ∧ lstepf(gs, ls, I17, a).n < # gstepf(gs, ls, I17, a).ar ∧ lstepf(gs, ls, I17, a).e ≠ ⊥ ∧ lstepf(gs, ls, I17, a).sz = # gstepf(gs, ls, I17, a).ar ∧ ( lstepf(gs, ls, I17, a).n0 < # gstepf(gs, ls, I17, a).ar ∧ lstepf(gs, ls, I17, a).n0 = get_hash(lstepf(gs, ls, I17, a).e, lstepf(gs, ls, I17, a).sz)) ∧ ¬ lstepf(gs, ls, I17, a).b |
ls.n0 = get_hash(ls.e, ls.sz), ls.sz = # gs.ar, pcstepf(gs, ls, I17, a) = I20, # gs.ar ≠ 0, ls.e ≠ ⊥, ls.n < # gs.ar, ls.n0 < # gs.ar, allslotsfull(gs.ar, ls.n0, ls.n, ls.e, true), htok(gs.ar), pre(gs, ls, I17, a), ¬ ls.b ⊦ (# gstepf(gs, ls, I17, a).ar ≠ 0 ∧ htok(gstepf(gs, ls, I17, a).ar)) ∧ allslotsfull(gstepf(gs, ls, I17, a).ar, lstepf(gs, ls, I17, a).n0, lstepf(gs, ls, I17, a).n, lstepf(gs, ls, I17, a).e, false) ∧ lstepf(gs, ls, I17, a).n ≠ lstepf(gs, ls, I17, a).n0 ∧ lstepf(gs, ls, I17, a).n < # gstepf(gs, ls, I17, a).ar ∧ lstepf(gs, ls, I17, a).e ≠ ⊥ ∧ lstepf(gs, ls, I17, a).sz = # gstepf(gs, ls, I17, a).ar ∧ ( lstepf(gs, ls, I17, a).n0 < # gstepf(gs, ls, I17, a).ar ∧ lstepf(gs, ls, I17, a).n0 = get_hash(lstepf(gs, ls, I17, a).e, lstepf(gs, ls, I17, a).sz)) ∧ ¬ lstepf(gs, ls, I17, a).b
| ls.n0 = get_hash(ls.e, ls.sz), ls.sz = # gs.ar, pcstepf(gs, ls, I17, a) = I20, # gs.ar ≠ 0, ls.e ≠ ⊥, ls.n < # gs.ar, ls.n0 < # gs.ar, allslotsfull(gs.ar, ls.n0, ls.n, ls.e, true), htok(gs.ar), pre(gs, ls, I17, a), ¬ ls.b ⊦ (# gstepf(gs, ls, I17, a).ar ≠ 0 ∧ htok(gstepf(gs, ls, I17, a).ar)) ∧ allslotsfull(gstepf(gs, ls, I17, a).ar, lstepf(gs, ls, I17, a).n0, lstepf(gs, ls, I17, a).n, lstepf(gs, ls, I17, a).e, false) ∧ lstepf(gs, ls, I17, a).n ≠ lstepf(gs, ls, I17, a).n0 ∧ lstepf(gs, ls, I17, a).n < # gstepf(gs, ls, I17, a).ar ∧ lstepf(gs, ls, I17, a).e ≠ ⊥ ∧ lstepf(gs, ls, I17, a).sz = # gstepf(gs, ls, I17, a).ar ∧ ( lstepf(gs, ls, I17, a).n0 < # gstepf(gs, ls, I17, a).ar ∧ lstepf(gs, ls, I17, a).n0 = get_hash(lstepf(gs, ls, I17, a).e, lstepf(gs, ls, I17, a).sz)) ∧ ¬ lstepf(gs, ls, I17, a).b |
Used simplifier rules: ⊦ lstepf(gs, ls, I17, τ) = ls; (s) ⊦ gstepf(gs, ls, I17, τ) = gs; (s) ⊦ m < n → n ≠ 0; (s) lf-01: ⊦ m < n ∧ n = n0 → m < n0; (forward) from specification nat-basic lf-02: ⊦ m < n ∧ m = n0 → n0 < n; (forward) from specification nat-basic f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic ⊦ n0 ≠ n → (allslotsfull(ar, n0, n, e, true) ↔ allslotsfull(ar, n0, n, e, false)); (s) ⊦ pre(gs, ls, I17, a) ↔ a = τ; (s) ⊦ I18 ≠ I20; (s) ⊦ pcstepf(gs, ls, I17, a) = (ls.n = ls.n0 ⊃ I18;I20); (s)
The following image shows the proof tree of sequent calculus. The proved goal is at the bottom. You can click on the nodes to view additional rules. See here for details on colors in a proof tree.