| ⊦ ((r0 => a × r1 * lls(r1, r2, x) * hP))(h) ↔ ((lls(r0, r2, a ' + x) * hP))(h) ∧ True(h[r0].nxt = r1) |
¬(((r0 => a × r1 * lls(r1, r2, x) * hP))(h) ↔ ((lls(r0, r2, a ' + x) * hP))(h) ∧ True(h[r0].nxt = r1)) ⊦
| ¬(((r0 => a × r1 * lls(r1, r2, x) * hP))(h) ↔ ((lls(r0, r2, a ' + x) * hP))(h) ∧ True(h[r0].nxt = r1)) ⊦ |
⊦ ((r0 => a × r1 * lls(r1, r2, x) * hP))(h) ↔ (∃ r. (((r0 => a × r * lls(r, r2, x)) * hP))(h)) ∧ True(h[r0].nxt = r1)
Used simplifier rules: lls-rec: ⊦ lls(r, r1, a ' + x) = _∃(λ r0. r => a × r0 * lls(r0, r1, x)); sep-com: ⊦ hP0 * hP1 = hP1 * hP0; from specification heap-sep sep-ass: ⊦ (hP0 * hP1) * hP2 = hP0 * hP1 * hP2; from specification heap-sep ⊦ ((_∃ rP * hP))(h) ↔ (∃ r. ((rP(r) * hP))(h)); (s) a: ⊦ (x + y) + z = x + y + z; from specification list
| ⊦ ((r0 => a × r1 * lls(r1, r2, x) * hP))(h) ↔ (∃ r. (((r0 => a × r * lls(r, r2, x)) * hP))(h)) ∧ True(h[r0].nxt = r1) |
h[r0] = a0 × r3 ⊦ ((r0 => a × r1 * lls(r1, r2, x) * hP))(h) ↔ (∃ r. (((r0 => a × r * lls(r, r2, x)) * hP))(h)) ∧ True(r3 = r1)
Used simplifier rules: ⊦ val = ce.val ∧ nxt = ce.nxt ↔ ce = val × nxt; (elim) Used terms: h[r0], val, nxt
| h[r0] = a0 × r3 ⊦ ((r0 => a × r1 * lls(r1, r2, x) * hP))(h) ↔ (∃ r. (((r0 => a × r * lls(r, r2, x)) * hP))(h)) ∧ True(r3 = r1) |
h[r0] = a0 × r3, ((r0 => a × r1 * lls(r1, r2, x) * hP))(h) ⊦ (∃ r. (((r0 => a × r * lls(r, r2, x)) * hP))(h)) ∧ True(r3 = r1)
h[r0] = a0 × r3, True(r3 = r1), ¬ ((r0 => a × r1 * lls(r1, r2, x) * hP))(h), ∃ r. (((r0 => a × r * lls(r, r2, x)) * hP))(h) ⊦
| h[r0] = a0 × r3, ((r0 => a × r1 * lls(r1, r2, x) * hP))(h) ⊦ (∃ r. (((r0 => a × r * lls(r, r2, x)) * hP))(h)) ∧ True(r3 = r1) |
((r0 => a × r1 * lls(r1, r2, x) * hP))(h) ⊦ (∃ r. (((r0 => a × r * lls(r, r2, x)) * hP))(h)) ∧ True(true)
Used simplifier rules: ⊦ a × r = a0 × r0 ↔ a = a0 ∧ r = r0; (ws) ⊦ ((r => o0 * hP))(h) → (h[r] = o1 ↔ o0 = o1); (s) sep-com: ⊦ hP0 * hP1 = hP1 * hP0; from specification heap-sep sep-ass: ⊦ (hP0 * hP1) * hP2 = hP0 * hP1 * hP2; from specification heap-sep
| ((r0 => a × r1 * lls(r1, r2, x) * hP))(h) ⊦ (∃ r. (((r0 => a × r * lls(r, r2, x)) * hP))(h)) ∧ True(true) |
((r0 => a × r1 * lls(r1, r2, x) * hP))(h) ⊦ ∃ r. (((r0 => a × r * lls(r, r2, x)) * hP))(h)
((r0 => a × r1 * lls(r1, r2, x) * hP))(h), ¬ True(true) ⊦
| ((r0 => a × r1 * lls(r1, r2, x) * hP))(h) ⊦ ∃ r. (((r0 => a × r * lls(r, r2, x)) * hP))(h) |
Used simplifier rules: sep-ass: ⊦ (hP0 * hP1) * hP2 = hP0 * hP1 * hP2; from specification heap-sep sep-com: ⊦ hP0 * hP1 = hP1 * hP0; from specification heap-sep Used terms: r1
| ((r0 => a × r1 * lls(r1, r2, x) * hP))(h), ¬ True(true) ⊦ |
⊦ True(bv) ↔ bv
Used terms: true
| h[r0] = a0 × r3, True(r3 = r1), ¬ ((r0 => a × r1 * lls(r1, r2, x) * hP))(h), ∃ r. (((r0 => a × r * lls(r, r2, x)) * hP))(h) ⊦ |
(((r0 => a × r3 * lls(r3, r2, x)) * hP))(h), True(false), ¬ ((r0 => a × r1 * lls(r1, r2, x) * hP))(h) ⊦
Used simplifier rules: ⊦ a × r = a0 × r0 ↔ a = a0 ∧ r = r0; (ws) ⊦ ((r => o0 * hP))(h) → (h[r] = o1 ↔ o0 = o1); (s) sep-com: ⊦ hP0 * hP1 = hP1 * hP0; from specification heap-sep sep-ass: ⊦ (hP0 * hP1) * hP2 = hP0 * hP1 * hP2; from specification heap-sep
| (((r0 => a × r3 * lls(r3, r2, x)) * hP))(h), True(false), ¬ ((r0 => a × r1 * lls(r1, r2, x) * hP))(h) ⊦ |
⊦ True(bv) ↔ bv
Used terms: false
The following image shows the proof tree of sequent calculus. The proved goal is at the bottom. You can click on the nodes to view additional rules. See here for details on colors in a proof tree.