| ⊦ ls(null, x) = (emp ∧ ⌜x = []⌝ ) |
ls(null, x) ≠ (emp ∧ ⌜x = []⌝ ) ⊦
| ls(null, x) ≠ (emp ∧ ⌜x = []⌝ ) ⊦ |
x = a + x0, ls(null, x) ≠ (emp ∧ ⌜x = []⌝ ) ⊦
Used simplifier rules: ls-base: ⊦ ls(r, []) = (emp ∧ ⌜r = null⌝ ); list freely generated by [], +;; ⊦ ⌜true⌝ = true; (s) ⊦ (true ∧ hP) = hP; (s) and-ass: ⊦ ((hP0 ∧ hP1) ∧ hP2) = (hP0 ∧ hP1 ∧ hP2); from specification heap-sep and-com: ⊦ (hP0 ∧ hP1) = (hP1 ∧ hP0); from specification heap-sep
| x = a + x0, ls(null, x) ≠ (emp ∧ ⌜x = []⌝ ) ⊦ |
_∃(λ r0. false) ≠ false ⊦
Used simplifier rules: ls-rec: ⊦ ls(r, a ' + x) = _∃(λ r0. r => a × r0 * ls(r0, x)); and-com: ⊦ (hP0 ∧ hP1) = (hP1 ∧ hP0); from specification heap-sep and-ass: ⊦ ((hP0 ∧ hP1) ∧ hP2) = (hP0 ∧ hP1 ∧ hP2); from specification heap-sep ⊦ (false ∧ hP) = false; (s) ⊦ ⌜false⌝ = false; (s) a: ⊦ (x + y) + z = x + y + z; from specification list ⊦ a ' + x ≠ []; (s) ⊦ a + x = a ' + x; (s) sep-com: ⊦ hP0 * hP1 = hP1 * hP0; from specification heap-sep sep-ass: ⊦ (hP0 * hP1) * hP2 = hP0 * hP1 * hP2; from specification heap-sep ⊦ false * hP = false; (s) ⊦ null => o = ⌜false⌝ ; (s)
| _∃(λ r0. false) ≠ false ⊦ |
Used simplifier rules: ⊦ (_∃ rP)(h) ↔ (∃ r. rP(r)(h)); (s) ⊦ ¬ false(h); (s)
The following image shows the proof tree of sequent calculus. The proved goal is at the bottom. You can click on the nodes to view additional rules. See here for details on colors in a proof tree.