[Imprint]
[Data Privacy Statement]
[E-Mail]
View
long theorem info
. View
the proof
. Back to
main index
. View
the specification
. View
theorem base summary
, View
theorem base listing
, the
used properties by spec
, the
dependency list
, the
symbol table
,
Theorem insert-correct
s = abs(T1, T2, h1, h2), inv(T1, h1), inv(T2, h2), disj(T1, T2) ⊦ [insert(a, h1, h2; T1, T2)] (s ++ a = abs(T1, T2, h1, h2) ∧ inv(T1, h1) ∧ inv(T2, h2) ∧ disj(T1, T2))
Type: A user defined theorem
Validity: The proof is valid.
Features:
Comment:
Used by:
Used by units in proved state:
Proof exists?: Yes
View
the proof
Infos about the proof
Proved?: Yes
Interactions: 18
Proof steps: 149
Used lemmas:
less
,
disj-neq
,
hash-same
,
disj-reduce
,
size
,
inv-reduce
,
hash-given
,
at-put
,
in-abs
,
Used spec theorems:
set-basic
/
Extension
Used simplifier rules:
nat
/
elim-pred-c
nat-basic2
/
oz
set-basic
/
rax
nat-basic1
/
f
array
/table/
Size-put
slot
/
elim
nat
/
pred-03
nat-basic1
/
lf-02
slot
/
sel
array
/table/
Put-other
slot
/
disj
slot
/
inj
slot
/
upd
nat-basic2
/
s
nat-basic1
/
ref-1
nat-basic2
/
a
nat-basic2
/
c
set-basic
/
eq-03