| ⊦ ( (# gs.ar ≠ 0 ∧ htok(gs.ar)) ∧ ls.n < # gs.ar ∧ ls.e ≠ ⊥ ∧ ls.sz = # gs.ar ∧ (ls.n0 < # gs.ar ∧ ls.n0 = get_hash(ls.e, ls.sz)) ∧ ¬ ls.b ∧ allslotsfull(gs.ar, ls.n0, ls.n, ls.e, false) ∧ ls.n ≠ ls.n0) ∧ pre(gs, ls, M17, a) ∧ pcstepf(gs, ls, M17, a) = M5 → (# gstepf(gs, ls, M17, a).ar ≠ 0 ∧ htok(gstepf(gs, ls, M17, a).ar)) ∧ lstepf(gs, ls, M17, a).n < # gstepf(gs, ls, M17, a).ar ∧ lstepf(gs, ls, M17, a).e ≠ ⊥ ∧ lstepf(gs, ls, M17, a).sz = # gstepf(gs, ls, M17, a).ar ∧ ( lstepf(gs, ls, M17, a).n0 < # gstepf(gs, ls, M17, a).ar ∧ lstepf(gs, ls, M17, a).n0 = get_hash(lstepf(gs, ls, M17, a).e, lstepf(gs, ls, M17, a).sz)) ∧ ¬ lstepf(gs, ls, M17, a).b ∧ allslotsfull(gstepf(gs, ls, M17, a).ar, lstepf(gs, ls, M17, a).n0, lstepf(gs, ls, M17, a).n, lstepf(gs, ls, M17, a).e, false) |
ls.n0 = get_hash(ls.e, ls.sz), ls.sz = # gs.ar, pcstepf(gs, ls, M17, a) = M5, # gs.ar ≠ 0, ls.e ≠ ⊥, ls.n ≠ ls.n0, ls.n < # gs.ar, ls.n0 < # gs.ar, allslotsfull(gs.ar, ls.n0, ls.n, ls.e, false), htok(gs.ar), pre(gs, ls, M17, a), ¬ ls.b ⊦ (# gstepf(gs, ls, M17, a).ar ≠ 0 ∧ htok(gstepf(gs, ls, M17, a).ar)) ∧ lstepf(gs, ls, M17, a).n < # gstepf(gs, ls, M17, a).ar ∧ lstepf(gs, ls, M17, a).e ≠ ⊥ ∧ lstepf(gs, ls, M17, a).sz = # gstepf(gs, ls, M17, a).ar ∧ ( lstepf(gs, ls, M17, a).n0 < # gstepf(gs, ls, M17, a).ar ∧ lstepf(gs, ls, M17, a).n0 = get_hash(lstepf(gs, ls, M17, a).e, lstepf(gs, ls, M17, a).sz)) ∧ ¬ lstepf(gs, ls, M17, a).b ∧ allslotsfull(gstepf(gs, ls, M17, a).ar, lstepf(gs, ls, M17, a).n0, lstepf(gs, ls, M17, a).n, lstepf(gs, ls, M17, a).e, false)
| ls.n0 = get_hash(ls.e, ls.sz), ls.sz = # gs.ar, pcstepf(gs, ls, M17, a) = M5, # gs.ar ≠ 0, ls.e ≠ ⊥, ls.n ≠ ls.n0, ls.n < # gs.ar, ls.n0 < # gs.ar, allslotsfull(gs.ar, ls.n0, ls.n, ls.e, false), htok(gs.ar), pre(gs, ls, M17, a), ¬ ls.b ⊦ (# gstepf(gs, ls, M17, a).ar ≠ 0 ∧ htok(gstepf(gs, ls, M17, a).ar)) ∧ lstepf(gs, ls, M17, a).n < # gstepf(gs, ls, M17, a).ar ∧ lstepf(gs, ls, M17, a).e ≠ ⊥ ∧ lstepf(gs, ls, M17, a).sz = # gstepf(gs, ls, M17, a).ar ∧ ( lstepf(gs, ls, M17, a).n0 < # gstepf(gs, ls, M17, a).ar ∧ lstepf(gs, ls, M17, a).n0 = get_hash(lstepf(gs, ls, M17, a).e, lstepf(gs, ls, M17, a).sz)) ∧ ¬ lstepf(gs, ls, M17, a).b ∧ allslotsfull(gstepf(gs, ls, M17, a).ar, lstepf(gs, ls, M17, a).n0, lstepf(gs, ls, M17, a).n, lstepf(gs, ls, M17, a).e, false) |
Used simplifier rules: ⊦ lstepf(gs, ls, M17, τ) = ls; (s) ⊦ gstepf(gs, ls, M17, τ) = gs; (s) ⊦ m < n → n ≠ 0; (s) lf-01: ⊦ m < n ∧ n = n0 → m < n0; (forward) from specification nat-basic lf-02: ⊦ m < n ∧ m = n0 → n0 < n; (forward) from specification nat-basic f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic ⊦ pre(gs, ls, M17, a) ↔ a = τ; (s) ⊦ pcstepf(gs, ls, M17, a) = M5; (s)
The following image shows the proof tree of sequent calculus. The proved goal is at the bottom. You can click on the nodes to view additional rules. See here for details on colors in a proof tree.