| 〈build_rec#(i + 1; x, to2)〉 (x = x2 ∧ to2 = to1), ∀ j0, i0, x, x0, to. i→n(j0 - i0) < i→n(i1) → (x = x0 ∧ x0 ≠ [] ∧ i0 ≤ j0 ∧ max(x0) ≤ j0 → 〈build_rec#(i0; x, to)〉 (to = fail → (∀ t, x1. x0 ≠ depths(t, i0) + x1))), d ' + y = depths(t0, i + 1) + x2, to2 = fail, x = d ' + y, to1 ≠ fail, d ∈ depths(t0, i + 1), 0 ≤ i1, i < d, max(d ' + y) ≤ i1 + i, to1 = some(t0) ⊦ 〈build_rec#(i + 1; x2, to2)〉 〈if to2 = fail then to0 := fail else to0 := some(Node(t0, to2 .t))〉 (to0 = fail → (∀ t, x. d ' + y ≠ depths(t, i) + x)) |
〈build_rec#(i + 1; x, to2)〉 (x = x2 ∧ to2 = some(t0)), ∀ j0, i0, x, x0, to. i→n(j0 - i0) < i→n(i1) → (x = x0 ∧ x0 ≠ [] ∧ i0 ≤ j0 ∧ max(x0) ≤ j0 → 〈build_rec#(i0; x, to)〉 (to = fail → (∀ t, x1. x0 ≠ depths(t, i0) + x1))), x = d ' + y, to2 = fail, d ' + y = depths(t0, i + 1) + x2, d ∈ depths(t0, i + 1), max(d ' + y) ≤ i1 + i, i < d, 0 ≤ i1 ⊦ 〈build_rec#(i + 1; x2, to2)〉 〈if to2 = fail then to0 := fail else to0 := some(Node(t0, to2 .t))〉 (to0 = fail → (∀ t, x. d ' + y ≠ depths(t, i) + x))
[[CONCRETESIMPRULES : ([CSIMPSEQ : ⊦ d ∈ x → d ∈ x + y], [CSIMPFORWARD : ⊦ d ' + x = y → d ∈ y], [CSIMPFORWARD : ⊦ depths(t, i) + x = d ' + y → d ∈ depths(t, i)], [CSIMPSEQ : ⊦ (x + y) + z = x + y + z], [CSIMPSEQ : ⊦ fail ≠ some(t)])]]