| ⊦ ( (# gs.ar ≠ 0 ∧ htok(gs.ar)) ∧ ls.n < # gs.ar ∧ ls.e ≠ ⊥ ∧ ls.sz = # gs.ar ∧ (ls.n0 < # gs.ar ∧ ls.n0 = get_hash(ls.e, ls.sz)) ∧ (∃ n. n < # gs.ar ∧ gs.ar[n] = ls.e) ∧ allslotsfull(gs.ar, ls.n0, ls.n, ls.e, false)) ∧ pre(gs, ls, M8, a) ∧ pcstepf(gs, ls, M8, a) = M9 → (# gstepf(gs, ls, M8, a).ar ≠ 0 ∧ htok(gstepf(gs, ls, M8, a).ar)) ∧ lstepf(gs, ls, M8, a).n < # gstepf(gs, ls, M8, a).ar ∧ lstepf(gs, ls, M8, a).e ≠ ⊥ ∧ lstepf(gs, ls, M8, a).sz = # gstepf(gs, ls, M8, a).ar ∧ ( lstepf(gs, ls, M8, a).n0 < # gstepf(gs, ls, M8, a).ar ∧ lstepf(gs, ls, M8, a).n0 = get_hash(lstepf(gs, ls, M8, a).e, lstepf(gs, ls, M8, a).sz)) ∧ lstepf(gs, ls, M8, a).b ∧ (∃ n. n < # gstepf(gs, ls, M8, a).ar ∧ gstepf(gs, ls, M8, a).ar[n] = lstepf(gs, ls, M8, a).e) ∧ allslotsfull(gstepf(gs, ls, M8, a).ar, lstepf(gs, ls, M8, a).n0, lstepf(gs, ls, M8, a).n, lstepf(gs, ls, M8, a).e, false) |
ls.n0 = get_hash(ls.e, ls.sz), ls.sz = # gs.ar, pcstepf(gs, ls, M8, a) = M9, # gs.ar ≠ 0, ls.e ≠ ⊥, ls.n < # gs.ar, ls.n0 < # gs.ar, allslotsfull(gs.ar, ls.n0, ls.n, ls.e, false), htok(gs.ar), pre(gs, ls, M8, a), ∃ n. n < # gs.ar ∧ gs.ar[n] = ls.e ⊦ (# gstepf(gs, ls, M8, a).ar ≠ 0 ∧ htok(gstepf(gs, ls, M8, a).ar)) ∧ lstepf(gs, ls, M8, a).n < # gstepf(gs, ls, M8, a).ar ∧ lstepf(gs, ls, M8, a).e ≠ ⊥ ∧ lstepf(gs, ls, M8, a).sz = # gstepf(gs, ls, M8, a).ar ∧ ( lstepf(gs, ls, M8, a).n0 < # gstepf(gs, ls, M8, a).ar ∧ lstepf(gs, ls, M8, a).n0 = get_hash(lstepf(gs, ls, M8, a).e, lstepf(gs, ls, M8, a).sz)) ∧ lstepf(gs, ls, M8, a).b ∧ (∃ n. n < # gstepf(gs, ls, M8, a).ar ∧ gstepf(gs, ls, M8, a).ar[n] = lstepf(gs, ls, M8, a).e) ∧ allslotsfull(gstepf(gs, ls, M8, a).ar, lstepf(gs, ls, M8, a).n0, lstepf(gs, ls, M8, a).n, lstepf(gs, ls, M8, a).e, false)
| ls.n0 = get_hash(ls.e, ls.sz), ls.sz = # gs.ar, pcstepf(gs, ls, M8, a) = M9, # gs.ar ≠ 0, ls.e ≠ ⊥, ls.n < # gs.ar, ls.n0 < # gs.ar, allslotsfull(gs.ar, ls.n0, ls.n, ls.e, false), htok(gs.ar), pre(gs, ls, M8, a), ∃ n. n < # gs.ar ∧ gs.ar[n] = ls.e ⊦ (# gstepf(gs, ls, M8, a).ar ≠ 0 ∧ htok(gstepf(gs, ls, M8, a).ar)) ∧ lstepf(gs, ls, M8, a).n < # gstepf(gs, ls, M8, a).ar ∧ lstepf(gs, ls, M8, a).e ≠ ⊥ ∧ lstepf(gs, ls, M8, a).sz = # gstepf(gs, ls, M8, a).ar ∧ ( lstepf(gs, ls, M8, a).n0 < # gstepf(gs, ls, M8, a).ar ∧ lstepf(gs, ls, M8, a).n0 = get_hash(lstepf(gs, ls, M8, a).e, lstepf(gs, ls, M8, a).sz)) ∧ lstepf(gs, ls, M8, a).b ∧ (∃ n. n < # gstepf(gs, ls, M8, a).ar ∧ gstepf(gs, ls, M8, a).ar[n] = lstepf(gs, ls, M8, a).e) ∧ allslotsfull(gstepf(gs, ls, M8, a).ar, lstepf(gs, ls, M8, a).n0, lstepf(gs, ls, M8, a).n, lstepf(gs, ls, M8, a).e, false) |
ls.n0 = get_hash(ls.e, ls.sz), ls.sz = # gs.ar, gs.ar[n] = ls.e, ls.e ≠ ⊥, n < ls.sz, ls.n < ls.sz, ls.n0 < ls.sz, allslotsfull(gs.ar, ls.n0, ls.n, ls.e, false), htok(gs.ar) ⊦ ∃ n0. n0 < ls.sz ∧ gs.ar[n0] = ls.e
Used simplifier rules: ⊦ (ls.b:= b).e = ls.e; (s) ⊦ lstepf(gs, ls, M8, τ) = ls.b:= true; (s) ⊦ (ls.b:= b).n = ls.n; (s) ⊦ (ls.b:= b).n0 = ls.n0; (s) ⊦ gstepf(gs, ls, M8, τ) = gs; (s) ⊦ (ls.b:= b).b ↔ b; (s) ⊦ (ls.b:= b).sz = ls.sz; (s) ⊦ m < n → n ≠ 0; (s) lf-01: ⊦ m < n ∧ n = n0 → m < n0; (forward) from specification nat-basic lf-02: ⊦ m < n ∧ m = n0 → n0 < n; (forward) from specification nat-basic f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic ⊦ pre(gs, ls, M8, a) ↔ a = τ; (s) ⊦ pcstepf(gs, ls, M8, a) = M9; (s)
| ls.n0 = get_hash(ls.e, ls.sz), ls.sz = # gs.ar, gs.ar[n] = ls.e, ls.e ≠ ⊥, n < ls.sz, ls.n < ls.sz, ls.n0 < ls.sz, allslotsfull(gs.ar, ls.n0, ls.n, ls.e, false), htok(gs.ar) ⊦ ∃ n0. n0 < ls.sz ∧ gs.ar[n0] = ls.e |
Used terms: n
The following image shows the proof tree of sequent calculus. The proved goal is at the bottom. You can click on the nodes to view additional rules. See here for details on colors in a proof tree.