| x0 = 1 ' + 3 ' + 2 ' + 2 ', x1 = x0 ∧ d0 = 0, h0 = head(x1), to = fail, to3 = fail ⊦ 〈build_rec#(d0 + 1; x1, to3)〉 〈if to3 = fail then to0 := fail else { build_rec#(d0 + 1; x1, to) ; if to = fail then to0 := fail else to0 := some(Node(to3 .t, to .t)) }〉 〈to1 := to0 ; if ¬ is_empty(x1) then to1 := fail〉 to1 = fail |
x1 = 1 ' + 3 ' + 2 ' + 2 ', to3 = fail ⊦ 〈build_rec#(1; x1, to3)〉 〈if to3 = fail then to0 := fail else { to := fail ; build_rec#(1; x1, to) ; if to = fail then to0 := fail else to0 := some(Node(to3 .t, to .t)) }〉 〈to1 := to0 ; if x1 ≠ [] then to1 := fail〉 to1 = fail
[[CONCRETESIMPRULES : ([CSIMPSEQ : ⊦ d ∈ d0 ' ↔ d = d0], [CSIMPSEQ : ⊦ d ∈ x + y ↔ ¬ ¬ (d ∈ x ∨ d ∈ y)], [CSIMPFORWARD : ⊦ d ' + x = y → d ∈ y], [CSIMPSEQ : ⊦ (x + y) + z = x + y + z], [CSIMPFORWARD : ⊦ x + d ' = y → d ∈ y], [CSIMPSEQ : ⊦ is_empty(x) ↔ x = []])]]