%------------------------------------------------------------------------------ % File : cvc5---1.3.4 % Problem : SWV908-1 : TPTP v9.2.1. Released v4.1.0. % Transfm : none % Format : tptp:raw % Command : /export/starexec/sandbox/solver/bin/do_cvc5 /export/starexec/sandbox/benchmark/theBenchmark.p 300 THM % Computer : n028.cluster.edu % Model : x86_64 x86_64 % CPU : Intel(R) Xeon(R) CPU E5-2620 v4 2.10GHz % Memory : 8042.1875MB % OS : Linux 3.10.0-693.el7.x86_64 % CPULimit : 300s % WCLimit : 300s % DateTime : Wed Jun 3 09:02:35 AM UTC 2026 % Result : Unsatisfiable 0.46s 0.86s % Output : Proof 0.46s % Verified : % SZS Type : - % Comments : %------------------------------------------------------------------------------ %----WARNING: Could not form TPTP format derivation %------------------------------------------------------------------------------ %----ORIGINAL SYSTEM OUTPUT % 0.00/0.12 % Problem : SWV908-1 : TPTP v9.2.1. Released v4.1.0. % 0.12/0.13 % Command : /export/starexec/sandbox/solver/bin/do_cvc5 /export/starexec/sandbox/benchmark/theBenchmark.p 300 THM % 0.17/0.34 % Computer : n028.cluster.edu % 0.17/0.34 % Model : x86_64 x86_64 % 0.17/0.34 % CPU : Intel(R) Xeon(R) CPU E5-2620 v4 @ 2.10GHz % 0.17/0.34 % Memory : 8042.1875MB % 0.17/0.34 % OS : Linux 3.10.0-693.el7.x86_64 % 0.17/0.34 % CPULimit : 300 % 0.17/0.34 % WCLimit : 300 % 0.17/0.34 % DateTime : Tue Jun 2 21:21:35 EDT 2026 % 0.17/0.34 % CPUTime : % 0.41/0.60 %----Proving TF0_NAR, FOF, or CNF % 0.41/0.61 --- Run --decision=internal --simplification=none --no-inst-no-entail --no-cbqi --full-saturate-quant at 15... % 0.46/0.86 % SZS status Unsatisfiable % 0.46/0.86 % SZS output start Proof % 0.46/0.89 ( % 0.46/0.89 (declare-sort $$unsorted 0) % 0.46/0.89 (declare-const tptp.tc_nat $$unsorted) % 0.46/0.89 (declare-const tptp.v_pn $$unsorted) % 0.46/0.89 (declare-const tptp.v_y $$unsorted) % 0.46/0.89 (declare-const tptp.v_sko__Hoare__Mirabelle__Xsingle__stateE__1 (-> $$unsorted $$unsorted)) % 0.46/0.89 (declare-const tptp.v_c $$unsorted) % 0.46/0.89 (declare-const tptp.c_Com_OWT (-> $$unsorted Bool)) % 0.46/0.89 (declare-const tptp.v_sko__Hoare__Mirabelle__XMGF__lemma1__1 (-> $$unsorted $$unsorted)) % 0.46/0.89 (declare-const tptp.c_Map_Osko__Map__XdomD__1__1 (-> $$unsorted $$unsorted $$unsorted $$unsorted $$unsorted)) % 0.46/0.89 (declare-const tptp.class_Orderings_Olinorder (-> $$unsorted Bool)) % 0.46/0.89 (declare-const tptp.c_Option_Othe (-> $$unsorted $$unsorted)) % 0.46/0.89 (declare-const tptp.class_HOL_Oord (-> $$unsorted Bool)) % 0.46/0.89 (declare-const tptp.c_Com_Ocom_OSemi (-> $$unsorted $$unsorted $$unsorted)) % 0.46/0.89 (declare-const tptp.c_Natural_Oevaln (-> $$unsorted $$unsorted $$unsorted $$unsorted Bool)) % 0.46/0.89 (declare-const tptp.c_Fun_Oinj__on (-> $$unsorted $$unsorted $$unsorted $$unsorted Bool)) % 0.46/0.89 (declare-const tptp.c_Com_Osko__Com__XWTs__elim__cases__7__1 (-> $$unsorted $$unsorted)) % 0.46/0.89 (declare-const tptp.class_Orderings_Oorder (-> $$unsorted Bool)) % 0.46/0.89 (declare-const tptp.c_Set_Oinsert (-> $$unsorted $$unsorted $$unsorted $$unsorted)) % 0.46/0.89 (declare-const tptp.c_Com_Ocom_OLocal (-> $$unsorted $$unsorted $$unsorted $$unsorted)) % 0.46/0.89 (declare-const tptp.c_Com_Obody $$unsorted) % 0.46/0.89 (declare-const tptp.class_Lattices_Obounded__lattice (-> $$unsorted Bool)) % 0.46/0.89 (declare-const tptp.c_Com_Ocom_OCond (-> $$unsorted $$unsorted $$unsorted $$unsorted)) % 0.46/0.89 (declare-const tptp.c_Com_Ocom_Ocom__case (-> $$unsorted $$unsorted $$unsorted $$unsorted $$unsorted $$unsorted $$unsorted $$unsorted $$unsorted $$unsorted $$unsorted)) % 0.46/0.89 (declare-const tptp.c_Com_Ocom_OWhile (-> $$unsorted $$unsorted $$unsorted)) % 0.46/0.89 (declare-const tptp.hAPP (-> $$unsorted $$unsorted $$unsorted)) % 0.46/0.89 (declare-const tptp.c_Finite__Set_Ofinite (-> $$unsorted $$unsorted Bool)) % 0.46/0.89 (declare-const tptp.c_Hoare__Mirabelle_Ohoare__valids (-> $$unsorted $$unsorted $$unsorted Bool)) % 0.46/0.89 (declare-const tptp.c_Map_Odom (-> $$unsorted $$unsorted $$unsorted $$unsorted)) % 0.46/0.89 (declare-const tptp.c_Map_Omap__comp (-> $$unsorted $$unsorted $$unsorted $$unsorted $$unsorted $$unsorted $$unsorted)) % 0.46/0.89 (declare-const tptp.c_Com_Ocom_OCall (-> $$unsorted $$unsorted $$unsorted $$unsorted)) % 0.46/0.89 (declare-const tptp.c_Fun_Oid (-> $$unsorted $$unsorted)) % 0.46/0.89 (declare-const tptp.c_Natural_Oevalc (-> $$unsorted $$unsorted)) % 0.46/0.89 (declare-const tptp.c_COMBC (-> $$unsorted $$unsorted $$unsorted $$unsorted $$unsorted $$unsorted $$unsorted)) % 0.46/0.89 (declare-const tptp.c_Option_Ooption_ONone (-> $$unsorted $$unsorted)) % 0.46/0.89 (declare-const tptp.c_Com_Ocom_Ocom__rec (-> $$unsorted $$unsorted $$unsorted $$unsorted $$unsorted $$unsorted $$unsorted $$unsorted $$unsorted $$unsorted $$unsorted)) % 0.46/0.89 (declare-const tptp.tc_Option_Ooption (-> $$unsorted $$unsorted)) % 0.46/0.89 (declare-const tptp.c_Option_Ooption_Ooption__rec (-> $$unsorted $$unsorted $$unsorted $$unsorted $$unsorted $$unsorted)) % 0.46/0.89 (declare-const tptp.c_Hoare__Mirabelle_Ostate__not__singleton Bool) % 0.46/0.89 (declare-const tptp.class_Finite__Set_Ofinite_Ofinite (-> $$unsorted Bool)) % 0.46/0.89 (declare-const tptp.c_Com_Ocom_OAss (-> $$unsorted $$unsorted $$unsorted)) % 0.46/0.89 (declare-const tptp.class_Orderings_Otop (-> $$unsorted Bool)) % 0.46/0.89 (declare-const tptp.hBOOL (-> $$unsorted Bool)) % 0.46/0.89 (declare-const tptp.c_Option_Ooption_OSome (-> $$unsorted $$unsorted)) % 0.46/0.89 (declare-const tptp.c_Option_Ooption_Ooption__case (-> $$unsorted $$unsorted $$unsorted $$unsorted $$unsorted $$unsorted)) % 0.46/0.89 (declare-const tptp.c_Com_Ocom_OSKIP $$unsorted) % 0.46/0.89 (declare-const tptp.c_Lattices_Oupper__semilattice__class_Osup (-> $$unsorted $$unsorted $$unsorted $$unsorted)) % 0.46/0.89 (declare-const tptp.tc_bool $$unsorted) % 0.46/0.89 (declare-const tptp.c_Set_Oimage (-> $$unsorted $$unsorted $$unsorted $$unsorted $$unsorted)) % 0.46/0.89 (declare-const tptp.tc_fun (-> $$unsorted $$unsorted $$unsorted)) % 0.46/0.89 (declare-const tptp.c_Orderings_Otop__class_Otop (-> $$unsorted $$unsorted)) % 0.46/0.89 (declare-const tptp.c_Orderings_Obot__class_Obot (-> $$unsorted $$unsorted)) % 0.46/0.89 (declare-const tptp.c_COMBK (-> $$unsorted $$unsorted $$unsorted $$unsorted)) % 0.46/0.89 (declare-const tptp.c_Fun_Ofun__upd (-> $$unsorted $$unsorted $$unsorted $$unsorted $$unsorted $$unsorted)) % 0.46/0.89 (declare-const tptp.c_Map_Osko__Map__Xdom__eq__singleton__conv__1__1 (-> $$unsorted $$unsorted $$unsorted $$unsorted $$unsorted)) % 0.46/0.89 (declare-const tptp.class_Orderings_Opreorder (-> $$unsorted Bool)) % 0.46/0.89 (declare-const tptp.c_in (-> $$unsorted $$unsorted $$unsorted Bool)) % 0.46/0.89 (declare-const tptp.c_COMBS (-> $$unsorted $$unsorted $$unsorted $$unsorted $$unsorted $$unsorted)) % 0.46/0.89 (declare-const tptp.c_Com_Ocom_OBODY $$unsorted) % 0.46/0.89 (declare-const tptp.t_b $$unsorted) % 0.46/0.89 (declare-const tptp.tc_Com_Opname $$unsorted) % 0.46/0.89 (declare-const tptp.c_fequal (-> $$unsorted $$unsorted)) % 0.46/0.89 (declare-const tptp.t_a $$unsorted) % 0.46/0.89 (declare-const tptp.c_Map_Omap__add (-> $$unsorted $$unsorted $$unsorted $$unsorted $$unsorted)) % 0.46/0.89 (declare-const tptp.tc_Hoare__Mirabelle_Otriple (-> $$unsorted $$unsorted)) % 0.46/0.89 (declare-const tptp.c_Option_Ois__none (-> $$unsorted $$unsorted Bool)) % 0.46/0.89 (declare-const tptp.v_sko__Hoare__Mirabelle__Xfinite__pointwise__1 (-> $$unsorted $$unsorted $$unsorted $$unsorted $$unsorted $$unsorted $$unsorted)) % 0.46/0.89 (declare-const tptp.c_Hoare__Mirabelle_Otriple_Otriple (-> $$unsorted $$unsorted)) % 0.46/0.89 (declare-const tptp.c_Hoare__Mirabelle_Ohoare__derivs (-> $$unsorted $$unsorted $$unsorted Bool)) % 0.46/0.89 (declare-const tptp.tc_Com_Ostate $$unsorted) % 0.46/0.89 (declare-const tptp.c_Com_OWT__bodies Bool) % 0.46/0.89 (declare-const tptp.tc_Com_Ocom $$unsorted) % 0.46/0.89 (declare-const tptp.c_COMBB (-> $$unsorted $$unsorted $$unsorted $$unsorted $$unsorted $$unsorted)) % 0.46/0.89 (declare-const tptp.class_Lattices_Oupper__semilattice (-> $$unsorted Bool)) % 0.46/0.89 (declare-const tptp.c_Hoare__Mirabelle_OMGT $$unsorted) % 0.46/0.89 (declare-const tptp.class_Orderings_Obot (-> $$unsorted Bool)) % 0.46/0.89 (declare-const tptp.c_ATP__Linkup_Osko__Option__Xospec__1__1 (-> $$unsorted $$unsorted $$unsorted $$unsorted)) % 0.46/0.89 (declare-const tptp.c_Suc (-> $$unsorted $$unsorted)) % 0.46/0.89 (declare-const tptp.c_lessequals (-> $$unsorted $$unsorted $$unsorted Bool)) % 0.46/0.89 (declare-const tptp.c_Hoare__Mirabelle_Otriple__valid (-> $$unsorted $$unsorted $$unsorted Bool)) % 0.46/0.89 (declare-const tptp.c_Natural_Osko__Natural__Xevaln__elim__cases__6__1 (-> $$unsorted $$unsorted $$unsorted $$unsorted $$unsorted)) % 0.46/0.89 (declare-const tptp.c_Option_Omap (-> $$unsorted $$unsorted $$unsorted $$unsorted $$unsorted)) % 0.46/0.89 (declare-const tptp.class_Lattices_Olattice (-> $$unsorted Bool)) % 0.46/0.89 (define @t1 () (@var "V_fun_H" $$unsorted)) % 0.46/0.89 (define @t2 () (@var "V_fun" $$unsorted)) % 0.46/0.89 (define @t3 () (= @t2 @t1)) % 0.46/0.89 (define @t4 () (@var "V_pname_H" $$unsorted)) % 0.46/0.89 (define @t5 () (@var "V_vname_H" $$unsorted)) % 0.46/0.89 (define @t6 () (tptp.c_Com_Ocom_OCall @t5 @t4 @t1)) % 0.46/0.89 (define @t7 () (@var "V_pname" $$unsorted)) % 0.46/0.89 (define @t8 () (@var "V_vname" $$unsorted)) % 0.46/0.89 (define @t9 () (tptp.c_Com_Ocom_OCall @t8 @t7 @t2)) % 0.46/0.89 (define @t10 () (not (= @t9 @t6))) % 0.46/0.89 (define @t11 () (@list @t8 @t7 @t2 @t5 @t4 @t1)) % 0.46/0.89 (define @t12 () (@var "T_a" $$unsorted)) % 0.46/0.89 (define @t13 () (@var "V_com" $$unsorted)) % 0.46/0.89 (define @t14 () (@var "V_f8" $$unsorted)) % 0.46/0.89 (define @t15 () (@var "V_f7" $$unsorted)) % 0.46/0.89 (define @t16 () (@var "V_f6" $$unsorted)) % 0.46/0.89 (define @t17 () (@var "V_f5" $$unsorted)) % 0.46/0.89 (define @t18 () (@var "V_f4" $$unsorted)) % 0.46/0.89 (define @t19 () (@var "V_f3" $$unsorted)) % 0.46/0.89 (define @t20 () (@var "V_f2" $$unsorted)) % 0.46/0.89 (define @t21 () (@var "V_f1" $$unsorted)) % 0.46/0.89 (define @t22 () (tptp.c_Com_Ocom_Ocom__rec @t21 @t20 @t19 @t18 @t17 @t16 @t15 @t14 @t13 @t12)) % 0.46/0.89 (define @t23 () (@var "V_loc" $$unsorted)) % 0.46/0.89 (define @t24 () (tptp.hAPP (tptp.hAPP (tptp.hAPP @t19 @t23) @t2) @t13)) % 0.46/0.89 (define @t25 () (tptp.c_Com_Ocom_OLocal @t23 @t2 @t13)) % 0.46/0.89 (define @t26 () (@list @t21 @t20 @t19 @t18 @t17 @t16 @t15 @t14 @t23 @t2 @t13 @t12)) % 0.46/0.89 (define @t27 () (@var "V_com2_H" $$unsorted)) % 0.46/0.89 (define @t28 () (@var "V_com1_H" $$unsorted)) % 0.46/0.89 (define @t29 () (tptp.c_Com_Ocom_OSemi @t28 @t27)) % 0.46/0.89 (define @t30 () (tptp.c_Com_Ocom_OAss @t8 @t2)) % 0.46/0.89 (define @t31 () (@list @t21 @t20 @t19 @t18 @t17 @t16 @t15 @t14 @t12)) % 0.46/0.89 (define @t32 () (tptp.tc_fun @t12 tptp.tc_bool)) % 0.46/0.89 (define @t33 () (tptp.c_Orderings_Obot__class_Obot @t32)) % 0.46/0.89 (define @t34 () (@var "T_b" $$unsorted)) % 0.46/0.89 (define @t35 () (tptp.tc_Option_Ooption @t34)) % 0.46/0.89 (define @t36 () (tptp.c_Option_Ooption_ONone @t34)) % 0.46/0.89 (define @t37 () (tptp.c_COMBK @t36 @t35 @t12)) % 0.46/0.89 (define @t38 () (@var "V_B" $$unsorted)) % 0.46/0.89 (define @t39 () (@var "V_A" $$unsorted)) % 0.46/0.89 (define @t40 () (tptp.c_lessequals @t39 @t38 @t32)) % 0.46/0.89 (define @t41 () (not @t40)) % 0.46/0.89 (define @t42 () (@var "V_b" $$unsorted)) % 0.46/0.89 (define @t43 () (tptp.c_Set_Oinsert @t42 @t38 @t12)) % 0.46/0.89 (define @t44 () (@var "V_x" $$unsorted)) % 0.46/0.89 (define @t45 () (tptp.c_Set_Oinsert @t44 @t39 @t12)) % 0.46/0.89 (define @t46 () (tptp.c_lessequals @t45 @t38 @t32)) % 0.46/0.89 (define @t47 () (not @t46)) % 0.46/0.89 (define @t48 () (@list @t39 @t38 @t12 @t44)) % 0.46/0.89 (define @t49 () (tptp.c_Com_Ocom_OCond @t1 @t28 @t27)) % 0.46/0.89 (define @t50 () (@var "V_com2" $$unsorted)) % 0.46/0.89 (define @t51 () (@var "V_com1" $$unsorted)) % 0.46/0.89 (define @t52 () (tptp.c_Com_Ocom_OCond @t2 @t51 @t50)) % 0.46/0.89 (define @t53 () (@var "V_a" $$unsorted)) % 0.46/0.89 (define @t54 () (tptp.c_Set_Oinsert @t53 @t39 @t12)) % 0.46/0.89 (define @t55 () (@var "V_f" $$unsorted)) % 0.46/0.89 (define @t56 () (tptp.c_Fun_Oinj__on @t55 @t39 @t12 @t34)) % 0.46/0.89 (define @t57 () (tptp.c_Orderings_Otop__class_Otop @t32)) % 0.46/0.89 (define @t58 () (not (tptp.c_Fun_Oinj__on @t55 @t57 @t12 @t34))) % 0.46/0.89 (define @t59 () (tptp.tc_fun @t34 tptp.tc_bool)) % 0.46/0.89 (define @t60 () (tptp.c_Set_Oimage @t55 @t38 @t12 @t34)) % 0.46/0.89 (define @t61 () (tptp.c_Set_Oimage @t55 @t39 @t12 @t34)) % 0.46/0.89 (define @t62 () (tptp.c_lessequals @t61 @t60 @t59)) % 0.46/0.89 (define @t63 () (@list @t55 @t39 @t12 @t34 @t38)) % 0.46/0.89 (define @t64 () (@var "V_s" $$unsorted)) % 0.46/0.89 (define @t65 () (tptp.hBOOL (tptp.hAPP @t42 @t64))) % 0.46/0.89 (define @t66 () (@var "V_n" $$unsorted)) % 0.46/0.89 (define @t67 () (@var "V_c" $$unsorted)) % 0.46/0.89 (define @t68 () (tptp.c_Com_Ocom_OWhile @t42 @t67)) % 0.46/0.89 (define @t69 () (tptp.c_Finite__Set_Ofinite @t39 @t12)) % 0.46/0.89 (define @t70 () (not @t69)) % 0.46/0.89 (define @t71 () (tptp.c_Set_Oimage @t55 @t39 @t34 @t12)) % 0.46/0.89 (define @t72 () (tptp.c_in @t44 @t39 @t34)) % 0.46/0.89 (define @t73 () (not @t72)) % 0.46/0.89 (define @t74 () (tptp.hAPP @t55 @t44)) % 0.46/0.89 (define @t75 () (tptp.c_in @t44 @t39 @t12)) % 0.46/0.89 (define @t76 () (not @t75)) % 0.46/0.89 (define @t77 () (tptp.c_Orderings_Obot__class_Obot @t59)) % 0.46/0.89 (define @t78 () (tptp.c_Set_Oinsert @t53 @t33 @t12)) % 0.46/0.89 (define @t79 () (@list @t39 @t12)) % 0.46/0.89 (define @t80 () (not (tptp.class_Lattices_Oupper__semilattice @t12))) % 0.46/0.89 (define @t81 () (@list @t12 @t44)) % 0.46/0.89 (define @t82 () (tptp.c_Com_Ocom_OSemi @t51 @t50)) % 0.46/0.89 (define @t83 () (@list @t44 @t39 @t12)) % 0.46/0.89 (define @t84 () (tptp.c_Set_Oinsert @t53 @t38 @t12)) % 0.46/0.89 (define @t85 () (tptp.c_Set_Oinsert @t44 @t38 @t12)) % 0.46/0.89 (define @t86 () (tptp.c_Fun_Oid @t12)) % 0.46/0.89 (define @t87 () (@list @t12 @t39)) % 0.46/0.89 (define @t88 () (tptp.hAPP (tptp.hAPP (tptp.hAPP @t14 @t8) @t7) @t2)) % 0.46/0.89 (define @t89 () (@list @t21 @t20 @t19 @t18 @t17 @t16 @t15 @t14 @t8 @t7 @t2 @t12)) % 0.46/0.89 (define @t90 () (not @t65)) % 0.46/0.89 (define @t91 () (@var "V_s1" $$unsorted)) % 0.46/0.89 (define @t92 () (@var "V_c0" $$unsorted)) % 0.46/0.89 (define @t93 () (@var "V_c1" $$unsorted)) % 0.46/0.89 (define @t94 () (tptp.c_Com_Ocom_OCond @t42 @t92 @t93)) % 0.46/0.89 (define @t95 () (tptp.c_Natural_Oevaln @t94 @t64 @t66 @t91)) % 0.46/0.89 (define @t96 () (@list @t42 @t92 @t93 @t64 @t66 @t91)) % 0.46/0.89 (define @t97 () (@var "V_t" $$unsorted)) % 0.46/0.89 (define @t98 () (@var "V_c2" $$unsorted)) % 0.46/0.89 (define @t99 () (tptp.c_Com_Ocom_OCond @t42 @t93 @t98)) % 0.46/0.89 (define @t100 () (not (tptp.c_Natural_Oevaln @t99 @t64 @t66 @t97))) % 0.46/0.89 (define @t101 () (tptp.c_Natural_Oevaln @t93 @t64 @t66 @t97)) % 0.46/0.89 (define @t102 () (@var "V_y" $$unsorted)) % 0.46/0.89 (define @t103 () (tptp.c_Set_Oinsert @t102 @t39 @t12)) % 0.46/0.89 (define @t104 () (tptp.c_Map_Odom @t55 @t12 @t34)) % 0.46/0.89 (define @t105 () (@list @t55 @t44 @t102 @t12 @t34)) % 0.46/0.89 (define @t106 () (@var "V_S" $$unsorted)) % 0.46/0.89 (define @t107 () (tptp.hBOOL (tptp.hAPP @t106 @t44))) % 0.46/0.89 (define @t108 () (tptp.c_in @t44 @t106 @t12)) % 0.46/0.89 (define @t109 () (@var "V_P" $$unsorted)) % 0.46/0.89 (define @t110 () (@var "V_Q" $$unsorted)) % 0.46/0.89 (define @t111 () (@var "V_R" $$unsorted)) % 0.46/0.89 (define @t112 () (tptp.hAPP @t110 @t111)) % 0.46/0.89 (define @t113 () (tptp.hAPP @t109 @t111)) % 0.46/0.89 (define @t114 () (@var "T_c" $$unsorted)) % 0.46/0.89 (define @t115 () (tptp.hAPP (tptp.hAPP @t20 @t8) @t2)) % 0.46/0.89 (define @t116 () (@list @t21 @t20 @t19 @t18 @t17 @t16 @t15 @t14 @t8 @t2 @t12)) % 0.46/0.89 (define @t117 () (tptp.c_Orderings_Otop__class_Otop @t59)) % 0.46/0.89 (define @t118 () (@list @t55 @t44 @t34 @t12)) % 0.46/0.89 (define @t119 () (@var "V_s0" $$unsorted)) % 0.46/0.89 (define @t120 () (not (tptp.hBOOL (tptp.hAPP @t42 @t119)))) % 0.46/0.89 (define @t121 () (@var "V_s2" $$unsorted)) % 0.46/0.89 (define @t122 () (tptp.c_Natural_Oevalc @t67)) % 0.46/0.89 (define @t123 () (tptp.c_Natural_Oevalc @t68)) % 0.46/0.89 (define @t124 () (@var "V_xa" $$unsorted)) % 0.46/0.89 (define @t125 () (tptp.c_Set_Oinsert @t44 @t33 @t12)) % 0.46/0.89 (define @t126 () (tptp.c_Com_Ocom_OSemi @t92 @t93)) % 0.46/0.89 (define @t127 () (@var "V_m" $$unsorted)) % 0.46/0.89 (define @t128 () (@var "V_U" $$unsorted)) % 0.46/0.89 (define @t129 () (not (tptp.c_Finite__Set_Ofinite @t128 tptp.t_a))) % 0.46/0.89 (define @t130 () (tptp.tc_Hoare__Mirabelle_Otriple tptp.t_b)) % 0.46/0.89 (define @t131 () (tptp.c_Orderings_Obot__class_Obot (tptp.tc_fun @t130 tptp.tc_bool))) % 0.46/0.89 (define @t132 () (@var "V_Q_H" $$unsorted)) % 0.46/0.89 (define @t133 () (@var "V_P_H" $$unsorted)) % 0.46/0.89 (define @t134 () (@var "V_G" $$unsorted)) % 0.46/0.89 (define @t135 () (tptp.v_sko__Hoare__Mirabelle__Xfinite__pointwise__1 @t134 @t109 @t133 @t110 @t132 @t92)) % 0.46/0.89 (define @t136 () (tptp.hAPP @t92 @t135)) % 0.46/0.89 (define @t137 () (tptp.c_Hoare__Mirabelle_Otriple_Otriple tptp.t_b)) % 0.46/0.89 (define @t138 () (tptp.tc_fun tptp.tc_Com_Ostate tptp.tc_bool)) % 0.46/0.89 (define @t139 () (tptp.tc_fun tptp.t_b @t138)) % 0.46/0.89 (define @t140 () (tptp.tc_fun @t139 @t130)) % 0.46/0.89 (define @t141 () (tptp.tc_fun tptp.tc_Com_Ocom @t140)) % 0.46/0.89 (define @t142 () (not (tptp.c_Hoare__Mirabelle_Ohoare__derivs @t134 (tptp.c_Set_Oimage (tptp.c_COMBS (tptp.c_COMBS (tptp.c_COMBB @t137 @t133 @t139 @t141 tptp.t_a) @t92 tptp.t_a tptp.tc_Com_Ocom @t140) @t132 tptp.t_a @t139 @t130) @t128 tptp.t_a @t130) tptp.t_b))) % 0.46/0.89 (define @t143 () (tptp.c_Hoare__Mirabelle_Ohoare__derivs @t134 (tptp.c_Set_Oimage (tptp.c_COMBS (tptp.c_COMBS (tptp.c_COMBB @t137 @t109 @t139 @t141 tptp.t_a) @t92 tptp.t_a tptp.tc_Com_Ocom @t140) @t110 tptp.t_a @t139 @t130) @t128 tptp.t_a @t130) tptp.t_b)) % 0.46/0.89 (define @t144 () (@list @t134 @t109 @t92 @t110 @t128 @t133 @t132)) % 0.46/0.89 (define @t145 () (tptp.c_Option_Ooption_OSome @t34)) % 0.46/0.89 (define @t146 () (tptp.tc_Hoare__Mirabelle_Otriple tptp.tc_Com_Ostate)) % 0.46/0.89 (define @t147 () (tptp.tc_fun @t146 tptp.tc_bool)) % 0.46/0.89 (define @t148 () (tptp.c_Orderings_Obot__class_Obot @t147)) % 0.46/0.89 (define @t149 () (tptp.hAPP tptp.c_Hoare__Mirabelle_OMGT @t67)) % 0.46/0.89 (define @t150 () (tptp.c_Set_Oinsert @t149 @t148 @t146)) % 0.46/0.89 (define @t151 () (tptp.c_Hoare__Mirabelle_Ohoare__derivs @t148 @t150 tptp.tc_Com_Ostate)) % 0.46/0.89 (define @t152 () (tptp.c_Hoare__Mirabelle_Otriple_Otriple tptp.tc_Com_Ostate)) % 0.46/0.89 (define @t153 () (tptp.c_Set_Oinsert (tptp.hAPP (tptp.hAPP (tptp.hAPP @t152 @t109) @t67) @t110) @t148 @t146)) % 0.46/0.89 (define @t154 () (= @t7 @t4)) % 0.46/0.89 (define @t155 () (= @t8 @t5)) % 0.46/0.89 (define @t156 () (tptp.c_Com_Ocom_Ocom__rec @t21 @t20 @t19 @t18 @t17 @t16 @t15 @t14 @t50 @t12)) % 0.46/0.89 (define @t157 () (tptp.c_Com_Ocom_Ocom__rec @t21 @t20 @t19 @t18 @t17 @t16 @t15 @t14 @t51 @t12)) % 0.46/0.89 (define @t158 () (tptp.hAPP (tptp.hAPP @t18 @t51) @t50)) % 0.46/0.89 (define @t159 () (@list @t21 @t20 @t19 @t18 @t17 @t16 @t15 @t14 @t51 @t50 @t12)) % 0.46/0.89 (define @t160 () (@var "V_e2" $$unsorted)) % 0.46/0.89 (define @t161 () (@var "V_u1" $$unsorted)) % 0.46/0.89 (define @t162 () (tptp.hAPP @t145 @t161)) % 0.46/0.89 (define @t163 () (@var "V_e1" $$unsorted)) % 0.46/0.89 (define @t164 () (@var "V_com_H" $$unsorted)) % 0.46/0.89 (define @t165 () (tptp.c_Com_Ocom_OWhile @t1 @t164)) % 0.46/0.89 (define @t166 () (@list @t1 @t164)) % 0.46/0.89 (define @t167 () (tptp.hAPP @t123 @t64)) % 0.46/0.89 (define @t168 () (@var "V_C" $$unsorted)) % 0.46/0.89 (define @t169 () (tptp.c_Lattices_Oupper__semilattice__class_Osup @t38 @t168 @t32)) % 0.46/0.89 (define @t170 () (tptp.c_Lattices_Oupper__semilattice__class_Osup @t39 @t38 @t32)) % 0.46/0.89 (define @t171 () (tptp.c_Orderings_Obot__class_Obot @t12)) % 0.46/0.89 (define @t172 () (= @t50 @t27)) % 0.46/0.89 (define @t173 () (not (= @t82 @t29))) % 0.46/0.89 (define @t174 () (@list @t51 @t50 @t28 @t27)) % 0.46/0.89 (define @t175 () (= @t51 @t28)) % 0.46/0.89 (define @t176 () (tptp.c_Orderings_Otop__class_Otop @t12)) % 0.46/0.89 (define @t177 () (not (tptp.class_Lattices_Obounded__lattice @t12))) % 0.46/0.89 (define @t178 () (@list @t12 @t38)) % 0.46/0.89 (define @t179 () (@list @t53 @t39 @t12)) % 0.46/0.89 (define @t180 () (tptp.hAPP @t145 @t44)) % 0.46/0.89 (define @t181 () (@var "V_k" $$unsorted)) % 0.46/0.89 (define @t182 () (tptp.c_Suc @t66)) % 0.46/0.89 (define @t183 () (@var "V_loc_H" $$unsorted)) % 0.46/0.89 (define @t184 () (tptp.c_Com_Ocom_OLocal @t183 @t1 @t164)) % 0.46/0.89 (define @t185 () (tptp.hBOOL (tptp.hAPP @t103 @t44))) % 0.46/0.89 (define @t186 () (tptp.hBOOL (tptp.hAPP @t39 @t44))) % 0.46/0.89 (define @t187 () (tptp.c_Map_Odom @t127 @t12 @t34)) % 0.46/0.89 (define @t188 () (= @t39 @t38)) % 0.46/0.89 (define @t189 () (not (tptp.c_Fun_Oinj__on @t55 @t170 @t12 @t34))) % 0.46/0.89 (define @t190 () (not (= @t61 @t60))) % 0.46/0.89 (define @t191 () (tptp.c_Finite__Set_Ofinite @t54 @t12)) % 0.46/0.89 (define @t192 () (@list @t12)) % 0.46/0.89 (define @t193 () (not (= @t52 @t49))) % 0.46/0.89 (define @t194 () (@list @t2 @t51 @t50 @t1 @t28 @t27)) % 0.46/0.89 (define @t195 () (@var "V_F" $$unsorted)) % 0.46/0.89 (define @t196 () (tptp.c_Finite__Set_Ofinite @t195 @t12)) % 0.46/0.89 (define @t197 () (not @t196)) % 0.46/0.89 (define @t198 () (tptp.c_Finite__Set_Ofinite @t134 @t12)) % 0.46/0.89 (define @t199 () (tptp.c_Finite__Set_Ofinite (tptp.c_Lattices_Oupper__semilattice__class_Osup @t195 @t134 @t32) @t12)) % 0.46/0.89 (define @t200 () (@list @t44 @t12)) % 0.46/0.89 (define @t201 () (tptp.hAPP @t55 @t53)) % 0.46/0.89 (define @t202 () (tptp.c_in @t201 @t61 @t34)) % 0.46/0.89 (define @t203 () (tptp.c_in @t53 @t39 @t12)) % 0.46/0.89 (define @t204 () (not @t203)) % 0.46/0.89 (define @t205 () (= @t44 @t102)) % 0.46/0.89 (define @t206 () (@var "V_nat_H" $$unsorted)) % 0.46/0.89 (define @t207 () (@var "V_nat" $$unsorted)) % 0.46/0.89 (define @t208 () (@var "V_m3" $$unsorted)) % 0.46/0.89 (define @t209 () (@var "V_m2" $$unsorted)) % 0.46/0.89 (define @t210 () (@var "V_m1" $$unsorted)) % 0.46/0.89 (define @t211 () (= @t53 @t67)) % 0.46/0.89 (define @t212 () (@var "V_d" $$unsorted)) % 0.46/0.89 (define @t213 () (not (= @t74 (tptp.hAPP @t55 @t102)))) % 0.46/0.89 (define @t214 () (tptp.hBOOL (tptp.hAPP @t170 @t44))) % 0.46/0.89 (define @t215 () (tptp.hBOOL (tptp.hAPP @t38 @t44))) % 0.46/0.89 (define @t216 () (not @t186)) % 0.46/0.89 (define @t217 () (tptp.c_Set_Oimage @t55 @t39 @t12 @t12)) % 0.46/0.89 (define @t218 () (tptp.c_Fun_Oinj__on @t55 @t39 @t12 @t12)) % 0.46/0.89 (define @t219 () (@list @t55 @t39 @t12)) % 0.46/0.89 (define @t220 () (tptp.c_in @t67 @t170 @t12)) % 0.46/0.89 (define @t221 () (tptp.c_in @t67 @t39 @t12)) % 0.46/0.89 (define @t222 () (tptp.c_in @t67 @t38 @t12)) % 0.46/0.89 (define @t223 () (@list @t67 @t38 @t12 @t39)) % 0.46/0.89 (define @t224 () (tptp.c_in @t53 @t187 @t12)) % 0.46/0.89 (define @t225 () (not @t224)) % 0.46/0.89 (define @t226 () (tptp.hAPP @t127 @t53)) % 0.46/0.89 (define @t227 () (= @t226 @t36)) % 0.46/0.89 (define @t228 () (@list @t127 @t53 @t34 @t12)) % 0.46/0.89 (define @t229 () (not @t199)) % 0.46/0.89 (define @t230 () (@var "V_opt" $$unsorted)) % 0.46/0.89 (define @t231 () (tptp.c_Option_Ooption_ONone @t12)) % 0.46/0.89 (define @t232 () (tptp.tc_Hoare__Mirabelle_Otriple @t12)) % 0.46/0.89 (define @t233 () (tptp.tc_fun @t232 tptp.tc_bool)) % 0.46/0.89 (define @t234 () (tptp.c_Orderings_Obot__class_Obot @t233)) % 0.46/0.89 (define @t235 () (tptp.c_Hoare__Mirabelle_Otriple_Otriple @t12)) % 0.46/0.89 (define @t236 () (tptp.hAPP @t235 @t109)) % 0.46/0.89 (define @t237 () (= @t39 @t77)) % 0.46/0.89 (define @t238 () (tptp.c_COMBK @t67 @t12 @t34)) % 0.46/0.89 (define @t239 () (@list @t183 @t1 @t164)) % 0.46/0.89 (define @t240 () (@var "V_z" $$unsorted)) % 0.46/0.89 (define @t241 () (tptp.c_Fun_Ofun__upd @t55 @t44 @t102 @t12 @t34)) % 0.46/0.89 (define @t242 () (@list @t55 @t44 @t102 @t12 @t34 @t240)) % 0.46/0.89 (define @t243 () (@var "V_s_H" $$unsorted)) % 0.46/0.89 (define @t244 () (not (tptp.c_Natural_Oevaln @t67 @t64 @t66 @t243))) % 0.46/0.89 (define @t245 () (tptp.c_in @t53 (tptp.c_Set_Oinsert @t42 @t39 @t12) @t12)) % 0.46/0.89 (define @t246 () (= @t53 @t42)) % 0.46/0.89 (define @t247 () (tptp.c_Natural_Oevaln @t98 @t64 @t66 @t97)) % 0.46/0.89 (define @t248 () (tptp.c_Com_Ocom_OWhile @t2 @t13)) % 0.46/0.89 (define @t249 () (tptp.hAPP (tptp.c_Natural_Oevalc tptp.c_Com_Ocom_OSKIP) @t64)) % 0.46/0.89 (define @t250 () (not (tptp.c_lessequals @t38 @t39 @t32))) % 0.46/0.89 (define @t251 () (@list @t39 @t38 @t12)) % 0.46/0.89 (define @t252 () (tptp.hAPP @t122 @t64)) % 0.46/0.89 (define @t253 () (tptp.hBOOL (tptp.hAPP @t252 @t97))) % 0.46/0.89 (define @t254 () (@var "V_u" $$unsorted)) % 0.46/0.89 (define @t255 () (tptp.c_lessequals @t44 @t102 @t12)) % 0.46/0.89 (define @t256 () (not @t255)) % 0.46/0.89 (define @t257 () (tptp.c_lessequals @t102 @t44 @t12)) % 0.46/0.89 (define @t258 () (not @t257)) % 0.46/0.89 (define @t259 () (not (tptp.class_Orderings_Oorder @t12))) % 0.46/0.89 (define @t260 () (@list @t12 @t44 @t102)) % 0.46/0.89 (define @t261 () (tptp.c_Lattices_Oupper__semilattice__class_Osup @t44 @t102 @t12)) % 0.46/0.89 (define @t262 () (= @t261 @t102)) % 0.46/0.89 (define @t263 () (= @t170 @t38)) % 0.46/0.89 (define @t264 () (@list @t21 @t20 @t34 @t12)) % 0.46/0.89 (define @t265 () (tptp.c_Natural_Oevalc @t92)) % 0.46/0.89 (define @t266 () (tptp.hBOOL (tptp.hAPP (tptp.hAPP (tptp.c_Natural_Oevalc @t94) @t64) @t91))) % 0.46/0.89 (define @t267 () (@list @t42 @t92 @t93 @t64 @t91)) % 0.46/0.89 (define @t268 () (not (tptp.hBOOL (tptp.hAPP (tptp.hAPP (tptp.c_Natural_Oevalc @t99) @t64) @t97)))) % 0.46/0.89 (define @t269 () (tptp.c_Natural_Oevalc @t93)) % 0.46/0.89 (define @t270 () (tptp.hAPP @t269 @t64)) % 0.46/0.89 (define @t271 () (tptp.hBOOL (tptp.hAPP @t270 @t97))) % 0.46/0.89 (define @t272 () (@list @t55 @t12 @t34)) % 0.46/0.89 (define @t273 () (tptp.c_Lattices_Oupper__semilattice__class_Osup @t39 @t169 @t32)) % 0.46/0.89 (define @t274 () (@list @t39 @t38 @t12 @t168)) % 0.46/0.89 (define @t275 () (tptp.c_Lattices_Oupper__semilattice__class_Osup @t102 @t240 @t12)) % 0.46/0.89 (define @t276 () (tptp.c_Lattices_Oupper__semilattice__class_Osup @t44 @t275 @t12)) % 0.46/0.89 (define @t277 () (= (tptp.c_Lattices_Oupper__semilattice__class_Osup @t261 @t240 @t12) @t276)) % 0.46/0.89 (define @t278 () (@list @t12 @t44 @t102 @t240)) % 0.46/0.89 (define @t279 () (= @t276 (tptp.c_Lattices_Oupper__semilattice__class_Osup @t102 (tptp.c_Lattices_Oupper__semilattice__class_Osup @t44 @t240 @t12) @t12))) % 0.46/0.89 (define @t280 () (not (tptp.class_Lattices_Olattice @t12))) % 0.46/0.89 (define @t281 () (not @t56)) % 0.46/0.89 (define @t282 () (not (tptp.c_in @t102 @t39 @t12))) % 0.46/0.89 (define @t283 () (@list @t55 @t44 @t102 @t39 @t12 @t34)) % 0.46/0.89 (define @t284 () (= @t44 @t124)) % 0.46/0.89 (define @t285 () (tptp.c_lessequals @t39 @t168 @t32)) % 0.46/0.89 (define @t286 () (not @t285)) % 0.46/0.89 (define @t287 () (tptp.c_lessequals @t38 @t168 @t32)) % 0.46/0.89 (define @t288 () (not @t287)) % 0.46/0.89 (define @t289 () (tptp.c_lessequals @t170 @t168 @t32)) % 0.46/0.89 (define @t290 () (tptp.c_lessequals @t53 @t44 @t12)) % 0.46/0.89 (define @t291 () (tptp.c_lessequals @t42 @t44 @t12)) % 0.46/0.89 (define @t292 () (tptp.c_Lattices_Oupper__semilattice__class_Osup @t53 @t42 @t12)) % 0.46/0.89 (define @t293 () (tptp.c_lessequals @t292 @t44 @t12)) % 0.46/0.89 (define @t294 () (tptp.c_lessequals @t44 @t261 @t12)) % 0.46/0.89 (define @t295 () (tptp.c_lessequals @t102 @t261 @t12)) % 0.46/0.89 (define @t296 () (@list @t12 @t102 @t44)) % 0.46/0.89 (define @t297 () (tptp.c_lessequals @t240 @t44 @t12)) % 0.46/0.89 (define @t298 () (@list @t12 @t102 @t240 @t44)) % 0.46/0.89 (define @t299 () (tptp.c_lessequals @t44 @t240 @t12)) % 0.46/0.89 (define @t300 () (tptp.c_lessequals @t102 @t240 @t12)) % 0.46/0.89 (define @t301 () (not @t300)) % 0.46/0.89 (define @t302 () (tptp.c_lessequals @t261 @t240 @t12)) % 0.46/0.89 (define @t303 () (@list @t1 @t28 @t27)) % 0.46/0.89 (define @t304 () (tptp.c_Set_Oinsert @t42 @t33 @t12)) % 0.46/0.89 (define @t305 () (not (tptp.c_in @t44 @t33 @t12))) % 0.46/0.89 (define @t306 () (tptp.hBOOL (tptp.hAPP @t109 @t44))) % 0.46/0.89 (define @t307 () (not @t306)) % 0.46/0.89 (define @t308 () (@list @t109 @t44 @t12)) % 0.46/0.89 (define @t309 () (tptp.c_Option_Ooption_OSome @t12)) % 0.46/0.89 (define @t310 () (tptp.hAPP @t309 @t44)) % 0.46/0.89 (define @t311 () (tptp.hAPP (tptp.c_Map_Omap__add @t127 @t66 @t34 @t12) @t181)) % 0.46/0.89 (define @t312 () (= @t311 @t310)) % 0.46/0.89 (define @t313 () (tptp.hAPP @t66 @t181)) % 0.46/0.89 (define @t314 () (= @t313 @t231)) % 0.46/0.89 (define @t315 () (not @t314)) % 0.46/0.89 (define @t316 () (tptp.hAPP @t127 @t181)) % 0.46/0.89 (define @t317 () (= @t316 @t310)) % 0.46/0.89 (define @t318 () (= @t316 @t231)) % 0.46/0.89 (define @t319 () (= @t311 @t231)) % 0.46/0.89 (define @t320 () (not @t319)) % 0.46/0.89 (define @t321 () (@list @t127 @t66 @t34 @t12 @t181)) % 0.46/0.89 (define @t322 () (@var "V_ts" $$unsorted)) % 0.46/0.89 (define @t323 () (tptp.c_Hoare__Mirabelle_Ohoare__derivs @t134 (tptp.c_Set_Oinsert @t97 @t322 @t232) @t12)) % 0.46/0.89 (define @t324 () (not @t323)) % 0.46/0.89 (define @t325 () (tptp.c_Hoare__Mirabelle_Ohoare__derivs @t134 (tptp.c_Set_Oinsert @t97 @t234 @t232) @t12)) % 0.46/0.89 (define @t326 () (tptp.c_in @t44 @t38 @t12)) % 0.46/0.89 (define @t327 () (@list @t44 @t38 @t12 @t39)) % 0.46/0.89 (define @t328 () (@list @t55 @t44 @t39 @t12 @t34)) % 0.46/0.89 (define @t329 () (tptp.c_lessequals @t39 @t85 @t32)) % 0.46/0.89 (define @t330 () (not @t329)) % 0.46/0.89 (define @t331 () (@list @t44 @t39 @t12 @t38)) % 0.46/0.89 (define @t332 () (not (= @t170 @t33))) % 0.46/0.89 (define @t333 () (= @t39 @t33)) % 0.46/0.89 (define @t334 () (not (= (tptp.c_Lattices_Oupper__semilattice__class_Osup @t39 @t38 @t12) @t171))) % 0.46/0.89 (define @t335 () (@list @t12 @t39 @t38)) % 0.46/0.89 (define @t336 () (= @t261 (tptp.c_Lattices_Oupper__semilattice__class_Osup @t102 @t44 @t12))) % 0.46/0.89 (define @t337 () (not (= @t248 @t165))) % 0.46/0.89 (define @t338 () (@list @t2 @t13 @t1 @t164)) % 0.46/0.89 (define @t339 () (= @t13 @t164)) % 0.46/0.89 (define @t340 () (@list @t55 @t34 @t12)) % 0.46/0.89 (define @t341 () (= (tptp.c_Lattices_Oupper__semilattice__class_Osup @t44 @t261 @t12) @t261)) % 0.46/0.89 (define @t342 () (not (tptp.class_Finite__Set_Ofinite_Ofinite @t12))) % 0.46/0.89 (define @t343 () (tptp.hAPP @t152 (tptp.c_fequal tptp.tc_Com_Ostate))) % 0.46/0.89 (define @t344 () (@list @t67)) % 0.46/0.89 (define @t345 () (tptp.hAPP tptp.c_Com_Ocom_OBODY @t109)) % 0.46/0.89 (define @t346 () (not (tptp.c_Natural_Oevaln @t345 @t64 @t66 @t91))) % 0.46/0.89 (define @t347 () (tptp.c_Natural_Osko__Natural__Xevaln__elim__cases__6__1 @t109 @t66 @t64 @t91)) % 0.46/0.89 (define @t348 () (tptp.c_Map_Omap__comp @t210 @t209 @t181 @t34 @t12 @t114)) % 0.46/0.89 (define @t349 () (= @t348 @t231)) % 0.46/0.89 (define @t350 () (tptp.hAPP @t209 @t181)) % 0.46/0.89 (define @t351 () (tptp.c_Map_Omap__comp @t210 @t209 @t181 @t12 @t114 @t34)) % 0.46/0.89 (define @t352 () (tptp.c_Fun_Oinj__on @t55 @t38 @t12 @t34)) % 0.46/0.89 (define @t353 () (tptp.hAPP (tptp.hAPP @t16 @t2) @t13)) % 0.46/0.89 (define @t354 () (@list @t21 @t20 @t19 @t18 @t17 @t16 @t15 @t14 @t2 @t13 @t12)) % 0.46/0.89 (define @t355 () (@var "V_l2" $$unsorted)) % 0.46/0.89 (define @t356 () (tptp.c_in @t127 (tptp.c_Map_Odom @t355 @t12 @t34) @t12)) % 0.46/0.89 (define @t357 () (@var "V_l1" $$unsorted)) % 0.46/0.89 (define @t358 () (tptp.hAPP (tptp.c_Map_Omap__add @t357 @t355 @t12 @t34) @t127)) % 0.46/0.89 (define @t359 () (= @t358 (tptp.hAPP @t355 @t127))) % 0.46/0.89 (define @t360 () (@list @t357 @t355 @t12 @t34 @t127)) % 0.46/0.89 (define @t361 () (= @t97 @t64)) % 0.46/0.89 (define @t362 () (tptp.hAPP (tptp.hAPP (tptp.hAPP @t17 @t2) @t51) @t50)) % 0.46/0.89 (define @t363 () (@list @t21 @t20 @t19 @t18 @t17 @t16 @t15 @t14 @t2 @t51 @t50 @t12)) % 0.46/0.89 (define @t364 () (@var "V_g" $$unsorted)) % 0.46/0.89 (define @t365 () (@var "V_Procs" $$unsorted)) % 0.46/0.89 (define @t366 () (tptp.tc_fun @t12 @t138)) % 0.46/0.89 (define @t367 () (tptp.tc_fun @t366 @t232)) % 0.46/0.89 (define @t368 () (tptp.c_Option_Othe tptp.tc_Com_Ocom)) % 0.46/0.89 (define @t369 () (tptp.c_COMBB @t368 tptp.c_Com_Obody (tptp.tc_Option_Ooption tptp.tc_Com_Ocom) tptp.tc_Com_Ocom tptp.tc_Com_Opname)) % 0.46/0.89 (define @t370 () (tptp.c_COMBB @t235 @t109 @t366 (tptp.tc_fun tptp.tc_Com_Ocom @t367) tptp.tc_Com_Opname)) % 0.46/0.89 (define @t371 () (tptp.c_Set_Oimage (tptp.c_COMBS (tptp.c_COMBS @t370 @t369 tptp.tc_Com_Opname tptp.tc_Com_Ocom @t367) @t110 tptp.tc_Com_Opname @t366 @t232) @t365 tptp.tc_Com_Opname @t232)) % 0.46/0.89 (define @t372 () (tptp.c_Set_Oimage (tptp.c_COMBS (tptp.c_COMBS @t370 tptp.c_Com_Ocom_OBODY tptp.tc_Com_Opname tptp.tc_Com_Ocom @t367) @t110 tptp.tc_Com_Opname @t366 @t232) @t365 tptp.tc_Com_Opname @t232)) % 0.46/0.89 (define @t373 () (tptp.c_Lattices_Oupper__semilattice__class_Osup @t134 @t372 @t233)) % 0.46/0.89 (define @t374 () (not (tptp.c_Hoare__Mirabelle_Ohoare__derivs @t373 @t371 @t12))) % 0.46/0.89 (define @t375 () (@var "V_pn" $$unsorted)) % 0.46/0.89 (define @t376 () (tptp.hAPP tptp.c_Com_Ocom_OBODY @t375)) % 0.46/0.89 (define @t377 () (tptp.c_Set_Oimage @t55 @t38 @t34 @t12)) % 0.46/0.89 (define @t378 () (@list @t44 @t39 @t34 @t55 @t12)) % 0.46/0.89 (define @t379 () (@var "V_h" $$unsorted)) % 0.46/0.89 (define @t380 () (tptp.c_Set_Oimage @t55 @t77 @t34 @t12)) % 0.46/0.89 (define @t381 () (= @t53 @t212)) % 0.46/0.89 (define @t382 () (not (= (tptp.c_Set_Oinsert @t53 @t304 @t12) (tptp.c_Set_Oinsert @t67 (tptp.c_Set_Oinsert @t212 @t33 @t12) @t12)))) % 0.46/0.89 (define @t383 () (@list @t53 @t42 @t12 @t67 @t212)) % 0.46/0.89 (define @t384 () (= @t42 @t67)) % 0.46/0.89 (define @t385 () (= @t42 @t212)) % 0.46/0.89 (define @t386 () (@var "V_Z" $$unsorted)) % 0.46/0.89 (define @t387 () (tptp.hBOOL (tptp.hAPP (tptp.hAPP (tptp.c_Natural_Oevalc @t98) @t64) @t97))) % 0.46/0.89 (define @t388 () (tptp.c_Com_Ocom_OAss @t5 @t1)) % 0.46/0.89 (define @t389 () (@list @t5 @t1)) % 0.46/0.89 (define @t390 () (tptp.c_Fun_Ofun__upd @t55 @t44 @t102 @t34 @t12)) % 0.46/0.89 (define @t391 () (@var "T_aa" $$unsorted)) % 0.46/0.89 (define @t392 () (@var "V_fun1_H" $$unsorted)) % 0.46/0.89 (define @t393 () (@var "V_fun1" $$unsorted)) % 0.46/0.89 (define @t394 () (@var "V_fun2_H" $$unsorted)) % 0.46/0.89 (define @t395 () (@var "V_fun2" $$unsorted)) % 0.46/0.89 (define @t396 () (not (= (tptp.hAPP (tptp.hAPP (tptp.hAPP @t235 @t393) @t13) @t395) (tptp.hAPP (tptp.hAPP (tptp.hAPP @t235 @t392) @t164) @t394)))) % 0.46/0.89 (define @t397 () (@list @t12 @t393 @t13 @t395 @t392 @t164 @t394)) % 0.46/0.89 (define @t398 () (= @t313 @t310)) % 0.46/0.89 (define @t399 () (not @t312)) % 0.46/0.89 (define @t400 () (@list @t127 @t66 @t34 @t12 @t181 @t44)) % 0.46/0.89 (define @t401 () (@var "V_D" $$unsorted)) % 0.46/0.89 (define @t402 () (not (= @t30 @t388))) % 0.46/0.89 (define @t403 () (@list @t8 @t2 @t5 @t1)) % 0.46/0.89 (define @t404 () (@list @t28 @t27)) % 0.46/0.89 (define @t405 () (@var "V_m_H" $$unsorted)) % 0.46/0.89 (define @t406 () (tptp.c_Map_Odom @t405 @t12 @t34)) % 0.46/0.89 (define @t407 () (tptp.c_Fun_Oinj__on (tptp.c_Map_Omap__add @t127 @t405 @t12 @t34) @t406 @t12 @t35)) % 0.46/0.89 (define @t408 () (tptp.c_Fun_Oinj__on @t405 @t406 @t12 @t35)) % 0.46/0.89 (define @t409 () (tptp.hAPP @t145 @t102)) % 0.46/0.89 (define @t410 () (not (= @t25 @t184))) % 0.46/0.89 (define @t411 () (@list @t23 @t2 @t13 @t183 @t1 @t164)) % 0.46/0.89 (define @t412 () (@list @t5 @t4 @t1)) % 0.46/0.89 (define @t413 () (@list @t67 @t39 @t38 @t12)) % 0.46/0.89 (define @t414 () (not @t221)) % 0.46/0.89 (define @t415 () (@list @t66)) % 0.46/0.89 (define @t416 () (not (= @t350 @t180))) % 0.46/0.89 (define @t417 () (tptp.hAPP @t210 @t44)) % 0.46/0.89 (define @t418 () (not @t302)) % 0.46/0.89 (define @t419 () (@list @t12 @t44 @t240 @t102)) % 0.46/0.89 (define @t420 () (tptp.c_lessequals @t44 @t292 @t12)) % 0.46/0.89 (define @t421 () (@list @t12 @t44 @t53 @t42)) % 0.46/0.89 (define @t422 () (not @t293)) % 0.46/0.89 (define @t423 () (not @t289)) % 0.46/0.89 (define @t424 () (@list @t39 @t168 @t12 @t38)) % 0.46/0.89 (define @t425 () (not (tptp.class_Orderings_Opreorder @t12))) % 0.46/0.89 (define @t426 () (forall @t200 (tptp.c_lessequals @t44 @t44 @t32))) % 0.46/0.89 (define @t427 () (not (tptp.c_lessequals @t109 @t110 @t32))) % 0.46/0.89 (define @t428 () (tptp.hBOOL (tptp.hAPP @t110 @t44))) % 0.46/0.89 (define @t429 () (@list @t110 @t44 @t109 @t12)) % 0.46/0.89 (define @t430 () (tptp.c_lessequals @t44 @t44 @t12)) % 0.46/0.89 (define @t431 () (not (tptp.c_Finite__Set_Ofinite @t38 @t12))) % 0.46/0.89 (define @t432 () (@list @t39 @t12 @t38)) % 0.46/0.89 (define @t433 () (tptp.c_Hoare__Mirabelle_Ohoare__derivs @t134 @t322 @t12)) % 0.46/0.89 (define @t434 () (not @t433)) % 0.46/0.89 (define @t435 () (= @t240 @t44)) % 0.46/0.89 (define @t436 () (tptp.hAPP @t55 @t240)) % 0.46/0.89 (define @t437 () (@var "V_Y" $$unsorted)) % 0.46/0.89 (define @t438 () (tptp.c_in @t74 @t71 @t12)) % 0.46/0.89 (define @t439 () (@list @t134 @t12 @t109 @t110 @t365)) % 0.46/0.89 (define @t440 () (tptp.hAPP @t20 @t53)) % 0.46/0.89 (define @t441 () (tptp.hAPP @t145 @t53)) % 0.46/0.89 (define @t442 () (@list @t21 @t20 @t34 @t53 @t12)) % 0.46/0.89 (define @t443 () (tptp.tc_Option_Ooption @t12)) % 0.46/0.89 (define @t444 () (@var "V_v" $$unsorted)) % 0.46/0.89 (define @t445 () (tptp.hAPP @t309 @t444)) % 0.46/0.89 (define @t446 () (tptp.c_Option_Ooption_OSome tptp.t_b)) % 0.46/0.89 (define @t447 () (@var "V_a_H" $$unsorted)) % 0.46/0.89 (define @t448 () (tptp.hAPP @t309 @t447)) % 0.46/0.89 (define @t449 () (@list @t12 @t447)) % 0.46/0.89 (define @t450 () (tptp.hAPP @t309 @t102)) % 0.46/0.89 (define @t451 () (tptp.hAPP @t309 @t42)) % 0.46/0.89 (define @t452 () (= (tptp.hAPP (tptp.c_Fun_Ofun__upd @t127 @t53 @t451 @t34 @t443) @t44) @t450)) % 0.46/0.89 (define @t453 () (= @t44 @t53)) % 0.46/0.89 (define @t454 () (= (tptp.hAPP @t127 @t44) @t450)) % 0.46/0.89 (define @t455 () (= @t42 @t102)) % 0.46/0.89 (define @t456 () (not @t452)) % 0.46/0.89 (define @t457 () (@list @t127 @t53 @t12 @t42 @t34 @t44 @t102)) % 0.46/0.89 (define @t458 () (tptp.c_Option_Ooption_OSome @t391)) % 0.46/0.89 (define @t459 () (@var "V_k_H" $$unsorted)) % 0.46/0.89 (define @t460 () (@var "V_xx" $$unsorted)) % 0.46/0.89 (define @t461 () (tptp.hAPP @t309 @t460)) % 0.46/0.89 (define @t462 () (tptp.hAPP tptp.c_Com_Ocom_OBODY @t4)) % 0.46/0.89 (define @t463 () (@list @t4)) % 0.46/0.89 (define @t464 () (tptp.hAPP @t15 @t7)) % 0.46/0.89 (define @t465 () (tptp.hAPP tptp.c_Com_Ocom_OBODY @t7)) % 0.46/0.89 (define @t466 () (@list @t21 @t20 @t19 @t18 @t17 @t16 @t15 @t14 @t7 @t12)) % 0.46/0.89 (define @t467 () (@var "V_ts_H" $$unsorted)) % 0.46/0.89 (define @t468 () (@var "V_G_H" $$unsorted)) % 0.46/0.89 (define @t469 () (not (tptp.c_Hoare__Mirabelle_Ohoare__derivs @t468 @t322 @t12))) % 0.46/0.89 (define @t470 () (@list @t134 @t322 @t12 @t468)) % 0.46/0.89 (define @t471 () (@list @t134 @t322 @t12)) % 0.46/0.89 (define @t472 () (tptp.hAPP tptp.c_Com_Obody @t375)) % 0.46/0.89 (define @t473 () (tptp.hAPP @t368 @t472)) % 0.46/0.89 (define @t474 () (tptp.hAPP (tptp.hAPP @t236 @t473) @t110)) % 0.46/0.89 (define @t475 () (tptp.c_Hoare__Mirabelle_Otriple__valid @t66 @t474 @t12)) % 0.46/0.89 (define @t476 () (tptp.hAPP (tptp.hAPP @t236 @t376) @t110)) % 0.46/0.89 (define @t477 () (tptp.c_Hoare__Mirabelle_Otriple__valid @t182 @t476 @t12)) % 0.46/0.89 (define @t478 () (@list @t66 @t12 @t109 @t375 @t110)) % 0.46/0.89 (define @t479 () (not (tptp.c_Com_OWT @t99))) % 0.46/0.89 (define @t480 () (tptp.c_Com_OWT @t93)) % 0.46/0.89 (define @t481 () (tptp.c_Com_OWT @t98)) % 0.46/0.89 (define @t482 () (not (tptp.c_Com_OWT @t92))) % 0.46/0.89 (define @t483 () (not @t480)) % 0.46/0.89 (define @t484 () (not (tptp.c_Com_OWT (tptp.c_Com_Ocom_OSemi @t93 @t98)))) % 0.46/0.89 (define @t485 () (@var "V_X" $$unsorted)) % 0.46/0.89 (define @t486 () (tptp.c_Com_OWT @t67)) % 0.46/0.89 (define @t487 () (not @t486)) % 0.46/0.89 (define @t488 () (tptp.c_Com_OWT @t68)) % 0.46/0.89 (define @t489 () (tptp.c_Com_OWT (tptp.c_Com_Ocom_OLocal @t437 @t53 @t67))) % 0.46/0.89 (define @t490 () (not tptp.c_Hoare__Mirabelle_Ostate__not__singleton)) % 0.46/0.89 (define @t491 () (tptp.c_Set_Oinsert @t474 @t234 @t232)) % 0.46/0.89 (define @t492 () (tptp.c_Hoare__Mirabelle_Ohoare__derivs @t134 (tptp.c_Set_Oinsert @t476 @t234 @t232) @t12)) % 0.46/0.89 (define @t493 () (@list @t134 @t12 @t109 @t375 @t110)) % 0.46/0.89 (define @t494 () (tptp.hAPP tptp.c_Com_Obody @t109)) % 0.46/0.89 (define @t495 () (tptp.hAPP @t368 @t494)) % 0.46/0.89 (define @t496 () (tptp.c_Map_Odom tptp.c_Com_Obody tptp.tc_Com_Opname tptp.tc_Com_Ocom)) % 0.46/0.89 (define @t497 () (tptp.v_sko__Hoare__Mirabelle__XMGF__lemma1__1 @t134)) % 0.46/0.89 (define @t498 () (tptp.c_Hoare__Mirabelle_Ohoare__derivs @t134 @t150 tptp.tc_Com_Ostate)) % 0.46/0.89 (define @t499 () (@list @t134 @t67)) % 0.46/0.89 (define @t500 () (tptp.c_Map_Odom @t55 @t34 @t12)) % 0.46/0.89 (define @t501 () (tptp.c_Com_OWT @t376)) % 0.46/0.89 (define @t502 () (tptp.c_Com_OWT @t345)) % 0.46/0.89 (define @t503 () (tptp.hAPP tptp.c_Hoare__Mirabelle_OMGT @t376)) % 0.46/0.89 (define @t504 () (not tptp.c_Com_OWT__bodies)) % 0.46/0.89 (define @t505 () (tptp.c_COMBB tptp.c_Hoare__Mirabelle_OMGT @t369 tptp.tc_Com_Ocom @t146 tptp.tc_Com_Opname)) % 0.46/0.89 (define @t506 () (tptp.c_COMBB tptp.c_Hoare__Mirabelle_OMGT tptp.c_Com_Ocom_OBODY tptp.tc_Com_Ocom @t146 tptp.tc_Com_Opname)) % 0.46/0.89 (define @t507 () (tptp.c_Set_Oimage @t506 @t365 tptp.tc_Com_Opname @t146)) % 0.46/0.89 (define @t508 () (tptp.c_Option_Ooption_OSome tptp.tc_Com_Ocom)) % 0.46/0.89 (define @t509 () (tptp.c_Set_Oimage @t505 @t496 tptp.tc_Com_Opname @t146)) % 0.46/0.89 (define @t510 () (not (tptp.c_lessequals @t195 @t509 @t147))) % 0.46/0.89 (define @t511 () (tptp.c_Set_Oimage @t506 @t496 tptp.tc_Com_Opname @t146)) % 0.46/0.89 (define @t512 () (tptp.c_Hoare__Mirabelle_Ohoare__derivs @t511 @t195 tptp.tc_Com_Ostate)) % 0.46/0.89 (define @t513 () (or @t512 @t510 @t504 @t490)) % 0.46/0.89 (define @t514 () (@list @t195)) % 0.46/0.89 (define @t515 () (forall @t514 @t513)) % 0.46/0.89 (define @t516 () (tptp.c_Hoare__Mirabelle_Ohoare__derivs @t511 @t509 tptp.tc_Com_Ostate)) % 0.46/0.89 (define @t517 () (@var "T_1" $$unsorted)) % 0.46/0.89 (define @t518 () (not (tptp.class_Lattices_Olattice @t517))) % 0.46/0.89 (define @t519 () (@var "T_2" $$unsorted)) % 0.46/0.89 (define @t520 () (tptp.tc_fun @t519 @t517)) % 0.46/0.89 (define @t521 () (@list @t519 @t517)) % 0.46/0.89 (define @t522 () (not (tptp.class_Finite__Set_Ofinite_Ofinite @t517))) % 0.46/0.89 (define @t523 () (tptp.c_fequal @t12)) % 0.46/0.89 (define @t524 () (or @t512 @t510)) % 0.46/0.89 (define @t525 () (forall @t514 @t524)) % 0.46/0.89 (define @t526 () (or @t504 @t490 @t524)) % 0.46/0.89 (define @t527 () (tptp.c_lessequals @t509 @t509 @t147)) % 0.46/0.89 (define @t528 () (not @t527)) % 0.46/0.89 (define @t529 () (or @t516 @t528)) % 0.46/0.89 (define @t530 () (@list true false)) % 0.46/0.89 (assume @p1 (forall @t11 (or @t10 @t3))) % 0.46/0.89 (assume @p2 (forall @t26 (= (tptp.c_Com_Ocom_Ocom__rec @t21 @t20 @t19 @t18 @t17 @t16 @t15 @t14 @t25 @t12) (tptp.hAPP @t24 @t22)))) % 0.46/0.89 (assume @p3 (forall (@list @t8 @t2 @t28 @t27) (not (= @t30 @t29)))) % 0.46/0.89 (assume @p4 (forall @t31 (= (tptp.c_Com_Ocom_Ocom__rec @t21 @t20 @t19 @t18 @t17 @t16 @t15 @t14 tptp.c_Com_Ocom_OSKIP @t12) @t21))) % 0.46/0.89 (assume @p5 (forall (@list @t34 @t12) (= (tptp.c_Map_Odom @t37 @t12 @t34) @t33))) % 0.46/0.89 (assume @p6 (forall (@list @t39 @t42 @t38 @t12) (or (tptp.c_lessequals @t39 @t43 @t32) @t41))) % 0.46/0.89 (assume @p7 (forall @t48 (or @t40 @t47))) % 0.46/0.89 (assume @p8 (forall (@list @t23 @t2 @t13 @t1 @t28 @t27) (not (= @t25 @t49)))) % 0.46/0.89 (assume @p9 (forall (@list @t2 @t51 @t50 @t5 @t4 @t1) (not (= @t52 @t6)))) % 0.46/0.89 (assume @p10 (forall (@list @t55 @t39 @t12 @t34 @t53) (or @t56 (not (tptp.c_Fun_Oinj__on @t55 @t54 @t12 @t34))))) % 0.46/0.89 (assume @p11 (forall @t63 (or @t62 @t41 @t58))) % 0.46/0.89 (assume @p12 (forall (@list @t39 @t38 @t12 @t55 @t34) (or @t40 (not @t62) @t58))) % 0.46/0.89 (assume @p13 (forall (@list @t42 @t67 @t64 @t66) (or (tptp.c_Natural_Oevaln @t68 @t64 @t66 @t64) @t65))) % 0.46/0.89 (assume @p14 (forall (@list @t38 @t34 @t55 @t39 @t12) (or (tptp.c_Finite__Set_Ofinite @t38 @t34) (not (tptp.c_lessequals @t38 @t61 @t59)) @t70))) % 0.46/0.89 (assume @p15 (forall (@list @t55 @t44 @t38 @t12 @t39 @t34) (or (tptp.c_in @t74 @t38 @t12) @t73 (not (tptp.c_lessequals @t71 @t38 @t32))))) % 0.46/0.89 (assume @p16 (forall (@list @t67 @t34 @t12 @t39 @t44) (or (= (tptp.c_Set_Oimage (tptp.c_COMBK @t67 @t34 @t12) @t39 @t12 @t34) (tptp.c_Set_Oinsert @t67 @t77 @t34)) @t76))) % 0.46/0.89 (assume @p17 (forall (@list @t42 @t53 @t12) (or (= @t42 @t53) (not (tptp.c_in @t42 @t78 @t12))))) % 0.46/0.89 (assume @p18 (forall @t79 (= (tptp.c_Lattices_Oupper__semilattice__class_Osup @t39 @t39 @t32) @t39))) % 0.46/0.89 (assume @p19 (forall @t81 (or @t80 (= (tptp.c_Lattices_Oupper__semilattice__class_Osup @t44 @t44 @t12) @t44)))) % 0.46/0.89 (assume @p20 (forall (@list @t5 @t4 @t1 @t51 @t50) (not (= @t6 @t82)))) % 0.46/0.89 (assume @p21 (forall @t83 (tptp.c_in @t44 @t45 @t12))) % 0.46/0.89 (assume @p22 (forall (@list @t53 @t38 @t12) (tptp.c_in @t53 @t84 @t12))) % 0.46/0.89 (assume @p23 (forall (@list @t44 @t38 @t12) (tptp.c_in @t44 @t85 @t12))) % 0.46/0.89 (assume @p24 (forall @t87 (tptp.c_Fun_Oinj__on @t86 @t39 @t12 @t12))) % 0.46/0.89 (assume @p25 (forall @t89 (= (tptp.c_Com_Ocom_Ocom__case @t21 @t20 @t19 @t18 @t17 @t16 @t15 @t14 @t9 @t12) @t88))) % 0.46/0.89 (assume @p26 (forall @t96 (or @t95 (not (tptp.c_Natural_Oevaln @t92 @t64 @t66 @t91)) @t90))) % 0.46/0.89 (assume @p27 (forall (@list @t42 @t64 @t93 @t66 @t97 @t98) (or @t90 @t101 @t100))) % 0.46/0.89 (assume @p28 (forall (@list @t44 @t102 @t39 @t12) (= (tptp.c_Set_Oinsert @t44 @t103 @t12) (tptp.c_Set_Oinsert @t102 @t45 @t12)))) % 0.46/0.89 (assume @p29 (forall @t105 (or (= (tptp.c_Map_Odom (tptp.c_Fun_Ofun__upd @t55 @t44 @t102 @t12 @t35) @t12 @t34) (tptp.c_Set_Oinsert @t44 @t104 @t12)) (= @t102 @t36)))) % 0.46/0.89 (assume @p30 (forall (@list @t44 @t106 @t12) (or @t108 (not @t107)))) % 0.46/0.89 (assume @p31 (forall (@list @t106 @t44 @t12) (or @t107 (not @t108)))) % 0.46/0.89 (assume @p32 (forall (@list @t109 @t12 @t34 @t110) (= (tptp.hAPP (tptp.c_COMBK @t109 @t12 @t34) @t110) @t109))) % 0.46/0.89 (assume @p33 (forall (@list @t109 @t110 @t34 @t114 @t12 @t111) (= (tptp.hAPP (tptp.c_COMBS @t109 @t110 @t34 @t114 @t12) @t111) (tptp.hAPP @t113 @t112)))) % 0.46/0.89 (assume @p34 (forall @t116 (= (tptp.c_Com_Ocom_Ocom__case @t21 @t20 @t19 @t18 @t17 @t16 @t15 @t14 @t30 @t12) @t115))) % 0.46/0.89 (assume @p35 (forall (@list @t109 @t21 @t20) (or (not (tptp.hBOOL (tptp.hAPP @t109 (tptp.c_Option_Ooption_Ooption__case @t21 @t20 (tptp.c_Option_Ooption_ONone tptp.t_b) tptp.t_a tptp.t_b)))) (tptp.hBOOL (tptp.hAPP @t109 @t21))))) % 0.46/0.89 (assume @p36 (forall @t118 (tptp.c_in @t74 (tptp.c_Set_Oimage @t55 @t117 @t34 @t12) @t12))) % 0.46/0.89 (assume @p37 (forall (@list @t42 @t67 @t119 @t66 @t121 @t91) (or (tptp.c_Natural_Oevaln @t68 @t119 @t66 @t121) (not (tptp.c_Natural_Oevaln @t68 @t91 @t66 @t121)) (not (tptp.c_Natural_Oevaln @t67 @t119 @t66 @t91)) @t120))) % 0.46/0.89 (assume @p38 (forall (@list @t42 @t67 @t119 @t121 @t91) (or (tptp.hBOOL (tptp.hAPP (tptp.hAPP @t123 @t119) @t121)) (not (tptp.hBOOL (tptp.hAPP (tptp.hAPP @t123 @t91) @t121))) (not (tptp.hBOOL (tptp.hAPP (tptp.hAPP @t122 @t119) @t91))) @t120))) % 0.46/0.89 (assume @p39 (forall (@list @t124 @t44 @t12) (= (tptp.c_Set_Oinsert @t124 @t125 @t12) (tptp.c_Set_Oinsert @t44 (tptp.c_Set_Oinsert @t124 @t33 @t12) @t12)))) % 0.46/0.89 (assume @p40 (forall (@list @t92 @t93 @t119 @t66 @t121 @t91) (or (tptp.c_Natural_Oevaln @t126 @t119 @t66 @t121) (not (tptp.c_Natural_Oevaln @t93 @t91 @t66 @t121)) (not (tptp.c_Natural_Oevaln @t92 @t119 @t66 @t91))))) % 0.46/0.89 (assume @p41 (forall (@list @t127 @t34 @t12) (= (tptp.c_Map_Omap__add @t127 @t37 @t12 @t34) @t127))) % 0.46/0.89 (assume @p42 (forall (@list @t34 @t12 @t127) (= (tptp.c_Map_Omap__add @t37 @t127 @t12 @t34) @t127))) % 0.46/0.89 (assume @p43 (forall @t144 (or @t143 @t142 (tptp.c_Hoare__Mirabelle_Ohoare__derivs @t134 (tptp.c_Set_Oinsert (tptp.hAPP (tptp.hAPP (tptp.hAPP @t137 (tptp.hAPP @t133 @t135)) @t136) (tptp.hAPP @t132 @t135)) @t131 @t130) tptp.t_b) @t129))) % 0.46/0.89 (assume @p44 (forall @t144 (or @t143 @t142 (not (tptp.c_Hoare__Mirabelle_Ohoare__derivs @t134 (tptp.c_Set_Oinsert (tptp.hAPP (tptp.hAPP (tptp.hAPP @t137 (tptp.hAPP @t109 @t135)) @t136) (tptp.hAPP @t110 @t135)) @t131 @t130) tptp.t_b)) @t129))) % 0.46/0.89 (assume @p45 (forall (@list @t55 @t12 @t34 @t44) (or (not (= @t104 @t125)) (= @t55 (tptp.c_Fun_Ofun__upd @t37 @t44 (tptp.hAPP @t145 (tptp.c_Map_Osko__Map__Xdom__eq__singleton__conv__1__1 @t55 @t44 @t12 @t34)) @t12 @t35))))) % 0.46/0.89 (assume @p46 (forall (@list @t109 @t67 @t110) (or (tptp.c_Hoare__Mirabelle_Ohoare__derivs @t148 @t153 tptp.tc_Com_Ostate) (not (tptp.c_Hoare__Mirabelle_Ohoare__valids @t148 @t153 tptp.tc_Com_Ostate)) (not @t151)))) % 0.46/0.89 (assume @p47 (forall @t11 (or @t10 @t154))) % 0.46/0.89 (assume @p48 (forall @t11 (or @t10 @t155))) % 0.46/0.89 (assume @p49 (forall @t159 (= (tptp.c_Com_Ocom_Ocom__rec @t21 @t20 @t19 @t18 @t17 @t16 @t15 @t14 @t82 @t12) (tptp.hAPP (tptp.hAPP @t158 @t157) @t156)))) % 0.46/0.89 (assume @p50 (forall (@list @t163 @t127 @t34 @t161 @t12 @t160) (or (= (tptp.c_Map_Omap__add (tptp.c_Fun_Ofun__upd @t163 @t127 @t162 @t12 @t35) @t160 @t12 @t34) (tptp.c_Fun_Ofun__upd (tptp.c_Map_Omap__add @t163 @t160 @t12 @t34) @t127 @t162 @t12 @t35)) (tptp.c_in @t127 (tptp.c_Map_Odom @t160 @t12 @t34) @t12)))) % 0.46/0.89 (assume @p51 (forall @t166 (not (= @t165 tptp.c_Com_Ocom_OSKIP)))) % 0.46/0.89 (assume @p52 (forall (@list @t1 @t164 @t23 @t2 @t13) (not (= @t165 @t25)))) % 0.46/0.89 (assume @p53 (forall (@list @t42 @t67 @t64) (or (tptp.hBOOL (tptp.hAPP @t167 @t64)) @t65))) % 0.46/0.89 (assume @p54 (forall (@list @t53 @t38 @t12 @t168) (= (tptp.c_Lattices_Oupper__semilattice__class_Osup @t84 @t168 @t32) (tptp.c_Set_Oinsert @t53 @t169 @t12)))) % 0.46/0.89 (assume @p55 (forall (@list @t39 @t53 @t38 @t12) (= (tptp.c_Lattices_Oupper__semilattice__class_Osup @t39 @t84 @t32) (tptp.c_Set_Oinsert @t53 @t170 @t12)))) % 0.46/0.89 (assume @p56 (forall @t87 (tptp.c_lessequals @t33 @t39 @t32))) % 0.46/0.89 (assume @p57 (forall @t81 (or (not (tptp.class_Orderings_Obot @t12)) (tptp.c_lessequals @t171 @t44 @t12)))) % 0.46/0.89 (assume @p58 (forall @t174 (or @t173 @t172))) % 0.46/0.89 (assume @p59 (forall @t174 (or @t173 @t175))) % 0.46/0.89 (assume @p60 (forall (@list @t51 @t50 @t1 @t164) (not (= @t82 @t165)))) % 0.46/0.89 (assume @p61 (forall @t81 (or @t177 (= (tptp.c_Lattices_Oupper__semilattice__class_Osup @t44 @t176 @t12) @t176)))) % 0.46/0.89 (assume @p62 (forall @t81 (or @t177 (= (tptp.c_Lattices_Oupper__semilattice__class_Osup @t176 @t44 @t12) @t176)))) % 0.46/0.89 (assume @p63 (forall @t178 (= (tptp.c_Lattices_Oupper__semilattice__class_Osup @t57 @t38 @t32) @t57))) % 0.46/0.89 (assume @p64 (forall @t79 (= (tptp.c_Lattices_Oupper__semilattice__class_Osup @t39 @t57 @t32) @t57))) % 0.46/0.89 (assume @p65 (forall (@list @t51 @t50 @t1 @t28 @t27) (not (= @t82 @t49)))) % 0.46/0.89 (assume @p66 (forall @t179 (not (= @t54 @t33)))) % 0.46/0.89 (assume @p67 (forall (@list @t28 @t27 @t23 @t2 @t13) (not (= @t29 @t25)))) % 0.46/0.89 (assume @p68 (forall (@list @t97 @t181 @t34 @t44 @t12) (not (= (tptp.c_Fun_Ofun__upd @t97 @t181 @t180 @t12 @t35) @t37)))) % 0.46/0.89 (assume @p69 (forall (@list @t66 @t97 @t12) (or (tptp.c_Hoare__Mirabelle_Otriple__valid @t66 @t97 @t12) (not (tptp.c_Hoare__Mirabelle_Otriple__valid @t182 @t97 @t12))))) % 0.46/0.89 (assume @p70 (forall @t83 (= (tptp.c_Set_Oinsert @t44 @t45 @t12) @t45))) % 0.46/0.89 (assume @p71 (forall (@list @t183 @t1 @t164 @t8 @t2) (not (= @t184 @t30)))) % 0.46/0.89 (assume @p72 (forall (@list @t39 @t44 @t102 @t12) (or @t186 (= @t102 @t44) (not @t185)))) % 0.46/0.89 (assume @p73 (forall (@list @t2 @t51 @t50 @t1 @t164) (not (= @t52 @t165)))) % 0.46/0.89 (assume @p74 (forall (@list @t127 @t66 @t12 @t34) (= (tptp.c_Map_Odom (tptp.c_Map_Omap__add @t127 @t66 @t12 @t34) @t12 @t34) (tptp.c_Lattices_Oupper__semilattice__class_Osup (tptp.c_Map_Odom @t66 @t12 @t34) @t187 @t32)))) % 0.46/0.89 (assume @p75 (forall @t63 (or @t190 @t189 @t188))) % 0.46/0.89 (assume @p76 (forall (@list @t1 @t28 @t27 @t23 @t2 @t13) (not (= @t49 @t25)))) % 0.46/0.89 (assume @p77 (forall (@list @t38 @t53 @t12) (tptp.c_lessequals @t38 @t84 @t32))) % 0.46/0.89 (assume @p78 (forall (@list @t39 @t12 @t53) (or @t69 (not @t191)))) % 0.46/0.89 (assume @p79 (forall @t179 (or @t191 @t70))) % 0.46/0.89 (assume @p80 (forall @t192 (tptp.c_Finite__Set_Ofinite @t33 @t12))) % 0.46/0.89 (assume @p81 (forall (@list @t1 @t28 @t27 @t51 @t50) (not (= @t49 @t82)))) % 0.46/0.89 (assume @p82 (forall @t194 (or @t193 @t172))) % 0.46/0.89 (assume @p83 (forall @t194 (or @t193 @t175))) % 0.46/0.89 (assume @p84 (forall @t194 (or @t193 @t3))) % 0.46/0.89 (assume @p85 (forall (@list @t195 @t134 @t12) (or @t199 (not @t198) @t197))) % 0.46/0.89 (assume @p86 (forall @t200 (tptp.c_in @t44 @t57 @t12))) % 0.46/0.89 (assume @p87 (forall (@list @t5 @t4 @t1 @t2 @t51 @t50) (not (= @t6 @t52)))) % 0.46/0.89 (assume @p88 (forall (@list @t53 @t39 @t12 @t55 @t34) (or @t203 (not @t202) @t58))) % 0.46/0.89 (assume @p89 (forall (@list @t55 @t53 @t39 @t12 @t34) (or @t202 @t204 @t58))) % 0.46/0.89 (assume @p90 (forall (@list @t44 @t102) (or (not (= (tptp.c_Suc @t44) (tptp.c_Suc @t102))) @t205))) % 0.46/0.89 (assume @p91 (forall (@list @t207 @t206) (or (not (= (tptp.c_Suc @t207) (tptp.c_Suc @t206))) (= @t207 @t206)))) % 0.46/0.89 (assume @p92 (forall (@list @t8 @t2 @t1 @t164) (not (= @t30 @t165)))) % 0.46/0.89 (assume @p93 (forall (@list @t210 @t209 @t208 @t12 @t34) (= (tptp.c_Map_Omap__add @t210 (tptp.c_Map_Omap__add @t209 @t208 @t12 @t34) @t12 @t34) (tptp.c_Map_Omap__add (tptp.c_Map_Omap__add @t210 @t209 @t12 @t34) @t208 @t12 @t34)))) % 0.46/0.89 (assume @p94 (forall (@list @t8 @t2 @t183 @t1 @t164) (not (= @t30 @t184)))) % 0.46/0.89 (assume @p95 (forall (@list @t127 @t53 @t42 @t12 @t34 @t67 @t212) (or (= (tptp.c_Fun_Ofun__upd (tptp.c_Fun_Ofun__upd @t127 @t53 @t42 @t12 @t34) @t67 @t212 @t12 @t34) (tptp.c_Fun_Ofun__upd (tptp.c_Fun_Ofun__upd @t127 @t67 @t212 @t12 @t34) @t53 @t42 @t12 @t34)) @t211))) % 0.46/0.89 (assume @p96 (forall @t105 (or @t213 @t58 @t205))) % 0.46/0.89 (assume @p97 (forall (@list @t38 @t44 @t39 @t12) (or @t215 @t186 (not @t214)))) % 0.46/0.89 (assume @p98 (forall @t48 (or @t214 (not @t215)))) % 0.46/0.89 (assume @p99 (forall @t48 (or @t214 @t216))) % 0.46/0.89 (assume @p100 (forall @t31 (= (tptp.c_Com_Ocom_Ocom__case @t21 @t20 @t19 @t18 @t17 @t16 @t15 @t14 tptp.c_Com_Ocom_OSKIP @t12) @t21))) % 0.46/0.89 (assume @p101 (forall @t219 (or (= @t217 @t39) (not @t218) (not (tptp.c_lessequals @t217 @t39 @t32)) @t70))) % 0.46/0.89 (assume @p102 (forall @t223 (or @t222 @t221 (not @t220)))) % 0.46/0.89 (assume @p103 (forall (@list @t23 @t2 @t13 @t1 @t164) (not (= @t25 @t165)))) % 0.46/0.89 (assume @p104 (forall @t228 (or (not @t227) @t225))) % 0.46/0.89 (assume @p105 (forall (@list @t53 @t127 @t12 @t34) (or @t224 @t227))) % 0.46/0.89 (assume @p106 (forall (@list @t195 @t12 @t134) (or @t196 @t229))) % 0.46/0.89 (assume @p107 (forall (@list @t134 @t12 @t195) (or @t198 @t229))) % 0.46/0.89 (assume @p108 (forall @t81 (or @t177 (= (tptp.c_Lattices_Oupper__semilattice__class_Osup @t44 @t171 @t12) @t44)))) % 0.46/0.89 (assume @p109 (forall @t81 (or @t177 (= (tptp.c_Lattices_Oupper__semilattice__class_Osup @t171 @t44 @t12) @t44)))) % 0.46/0.89 (assume @p110 (forall @t178 (= (tptp.c_Lattices_Oupper__semilattice__class_Osup @t33 @t38 @t32) @t38))) % 0.46/0.89 (assume @p111 (forall @t79 (= (tptp.c_Lattices_Oupper__semilattice__class_Osup @t39 @t33 @t32) @t39))) % 0.46/0.89 (assume @p112 (forall @t63 (or @t190 @t58 @t188))) % 0.46/0.89 (assume @p113 (forall (@list @t55 @t230 @t34 @t12) (or (not (= (tptp.c_Option_Omap @t55 @t230 @t34 @t12) @t231)) (= @t230 @t36)))) % 0.46/0.89 (assume @p114 (forall (@list @t8 @t2 @t1 @t28 @t27) (not (= @t30 @t49)))) % 0.46/0.89 (assume @p115 (forall (@list @t134 @t12 @t109 @t67 @t212 @t111 @t110) (or (tptp.c_Hoare__Mirabelle_Ohoare__derivs @t134 (tptp.c_Set_Oinsert (tptp.hAPP (tptp.hAPP @t236 (tptp.c_Com_Ocom_OSemi @t67 @t212)) @t111) @t234 @t232) @t12) (not (tptp.c_Hoare__Mirabelle_Ohoare__derivs @t134 (tptp.c_Set_Oinsert (tptp.hAPP (tptp.hAPP (tptp.hAPP @t235 @t110) @t212) @t111) @t234 @t232) @t12)) (not (tptp.c_Hoare__Mirabelle_Ohoare__derivs @t134 (tptp.c_Set_Oinsert (tptp.hAPP (tptp.hAPP @t236 @t67) @t110) @t234 @t232) @t12))))) % 0.46/0.89 (assume @p116 (forall @t166 (not (= tptp.c_Com_Ocom_OSKIP @t165)))) % 0.46/0.89 (assume @p117 (forall @t81 (not (tptp.hBOOL (tptp.hAPP @t33 @t44))))) % 0.46/0.89 (assume @p118 (forall (@list @t67 @t12 @t34 @t39) (or (= (tptp.c_Set_Oimage @t238 @t39 @t34 @t12) (tptp.c_Set_Oinsert @t67 @t33 @t12)) @t237))) % 0.46/0.89 (assume @p119 (forall @t239 (not (= tptp.c_Com_Ocom_OSKIP @t184)))) % 0.46/0.89 (assume @p120 (forall @t192 (not (= @t57 @t33)))) % 0.46/0.89 (assume @p121 (forall @t242 (= (tptp.c_Fun_Ofun__upd @t241 @t44 @t240 @t12 @t34) (tptp.c_Fun_Ofun__upd @t55 @t44 @t240 @t12 @t34)))) % 0.46/0.89 (assume @p122 (forall (@list @t67 @t64 @t66 @t243) (or (tptp.c_Natural_Oevaln @t67 @t64 @t182 @t243) @t244))) % 0.46/0.89 (assume @p123 (forall @t81 (tptp.hBOOL (tptp.hAPP @t57 @t44)))) % 0.46/0.89 (assume @p124 (forall (@list @t53 @t39 @t12 @t42) (or @t203 @t246 (not @t245)))) % 0.46/0.89 (assume @p125 (forall (@list @t98 @t64 @t66 @t97 @t42 @t93) (or @t247 @t65 @t100))) % 0.46/0.89 (assume @p126 (forall @t96 (or @t95 (not (tptp.c_Natural_Oevaln @t93 @t64 @t66 @t91)) @t65))) % 0.46/0.89 (assume @p127 (forall (@list @t2 @t13 @t5 @t4 @t1) (not (= @t248 @t6)))) % 0.46/0.89 (assume @p128 (forall (@list @t64) (tptp.hBOOL (tptp.hAPP @t249 @t64)))) % 0.46/0.89 (assume @p129 (forall (@list @t28 @t27 @t8 @t2) (not (= @t29 @t30)))) % 0.46/0.89 (assume @p130 (forall @t251 (or @t188 @t250 @t41))) % 0.46/0.89 (assume @p131 (forall (@list @t254 @t97 @t67 @t64) (or (= @t254 @t97) (not (tptp.hBOOL (tptp.hAPP @t252 @t254))) (not @t253)))) % 0.46/0.89 (assume @p132 (forall @t260 (or @t259 @t205 @t258 @t256))) % 0.46/0.89 (assume @p133 (forall @t260 (or @t259 @t205 @t256 @t258))) % 0.46/0.89 (assume @p134 (forall @t239 (not (= @t184 tptp.c_Com_Ocom_OSKIP)))) % 0.46/0.89 (assume @p135 (forall @t260 (or @t80 (= @t261 @t44) @t258))) % 0.46/0.89 (assume @p136 (forall @t260 (or @t80 (not @t262) @t255))) % 0.46/0.89 (assume @p137 (forall @t260 (or @t80 @t262 @t256))) % 0.46/0.89 (assume @p138 (forall @t251 (or @t263 @t41))) % 0.46/0.89 (assume @p139 (forall @t251 (or (= @t170 @t39) @t250))) % 0.46/0.89 (assume @p140 (forall @t251 (or (not @t263) @t40))) % 0.46/0.89 (assume @p141 (forall (@list @t64 @t66) (tptp.c_Natural_Oevaln tptp.c_Com_Ocom_OSKIP @t64 @t66 @t64))) % 0.46/0.89 (assume @p142 (forall @t192 (tptp.c_Option_Ois__none @t231 @t12))) % 0.46/0.89 (assume @p143 (forall @t264 (= (tptp.c_Option_Ooption_Ooption__case @t21 @t20 @t36 @t12 @t34) @t21))) % 0.46/0.89 (assume @p144 (forall @t267 (or @t266 (not (tptp.hBOOL (tptp.hAPP (tptp.hAPP @t265 @t64) @t91))) @t90))) % 0.46/0.89 (assume @p145 (forall (@list @t42 @t64 @t93 @t97 @t98) (or @t90 @t271 @t268))) % 0.46/0.89 (assume @p146 (forall @t264 (= (tptp.c_Option_Ooption_Ooption__rec @t21 @t20 @t36 @t12 @t34) @t21))) % 0.46/0.89 (assume @p147 (forall (@list @t92 @t93 @t119 @t121 @t91) (or (tptp.hBOOL (tptp.hAPP (tptp.hAPP (tptp.c_Natural_Oevalc @t126) @t119) @t121)) (not (tptp.hBOOL (tptp.hAPP (tptp.hAPP @t269 @t91) @t121))) (not (tptp.hBOOL (tptp.hAPP (tptp.hAPP @t265 @t119) @t91)))))) % 0.46/0.89 (assume @p148 (forall @t272 (tptp.c_Fun_Oinj__on @t55 @t33 @t12 @t34))) % 0.46/0.89 (assume @p149 (forall (@list @t39 @t38 @t168 @t12) (= @t273 (tptp.c_Lattices_Oupper__semilattice__class_Osup @t38 (tptp.c_Lattices_Oupper__semilattice__class_Osup @t39 @t168 @t32) @t32)))) % 0.46/0.89 (assume @p150 (forall @t274 (= (tptp.c_Lattices_Oupper__semilattice__class_Osup @t170 @t168 @t32) @t273))) % 0.46/0.89 (assume @p151 (forall @t278 (or @t80 @t277))) % 0.46/0.89 (assume @p152 (forall @t278 (or @t80 @t279))) % 0.46/0.89 (assume @p153 (forall @t278 (or @t280 @t279))) % 0.46/0.89 (assume @p154 (forall @t278 (or @t280 @t277))) % 0.46/0.89 (assume @p155 (forall @t283 (or @t213 @t282 @t76 @t205 @t281))) % 0.46/0.89 (assume @p156 (forall @t283 (or @t213 @t282 @t76 @t281 @t205))) % 0.46/0.89 (assume @p157 (forall (@list @t55 @t44 @t124 @t39 @t12 @t34) (or (not (= @t74 (tptp.hAPP @t55 @t124))) (not (tptp.c_in @t124 @t39 @t12)) @t76 @t281 @t284))) % 0.46/0.89 (assume @p158 (forall @t283 (or @t213 @t281 @t205 @t282 @t76))) % 0.46/0.89 (assume @p159 (forall @t274 (or @t289 @t288 @t286))) % 0.46/0.89 (assume @p160 (forall (@list @t38 @t39 @t12) (tptp.c_lessequals @t38 @t170 @t32))) % 0.46/0.89 (assume @p161 (forall @t251 (tptp.c_lessequals @t39 @t170 @t32))) % 0.46/0.89 (assume @p162 (forall (@list @t12 @t53 @t42 @t44) (or @t80 @t293 (not @t291) (not @t290)))) % 0.46/0.89 (assume @p163 (forall @t260 (or @t80 @t294))) % 0.46/0.89 (assume @p164 (forall @t296 (or @t80 @t295))) % 0.46/0.89 (assume @p165 (forall @t298 (or @t80 (tptp.c_lessequals @t275 @t44 @t12) (not @t297) @t258))) % 0.46/0.89 (assume @p166 (forall @t278 (or @t80 @t302 @t301 (not @t299)))) % 0.46/0.89 (assume @p167 (forall @t296 (or @t280 @t295))) % 0.46/0.89 (assume @p168 (forall @t260 (or @t280 @t294))) % 0.46/0.89 (assume @p169 (forall @t303 (not (= tptp.c_Com_Ocom_OSKIP @t49)))) % 0.46/0.89 (assume @p170 (forall (@list @t8 @t2 @t5 @t4 @t1) (not (= @t30 @t6)))) % 0.46/0.89 (assume @p171 (forall (@list @t53 @t12 @t42) (or (not (= @t78 @t304)) @t246))) % 0.46/0.89 (assume @p172 (forall @t308 (or @t307 @t305))) % 0.46/0.89 (assume @p173 (forall (@list @t34 @t12 @t44 @t124) (= (tptp.c_Map_Odom (tptp.c_Fun_Ofun__upd @t37 @t44 (tptp.hAPP @t145 @t124) @t12 @t35) @t12 @t34) @t125))) % 0.46/0.89 (assume @p174 (forall (@list @t67 @t12 @t34) (= (tptp.c_Set_Oimage @t238 @t77 @t34 @t12) @t33))) % 0.46/0.89 (assume @p175 (forall (@list @t127 @t181 @t12 @t44 @t66 @t34) (or (not @t317) @t315 @t312))) % 0.46/0.89 (assume @p176 (forall @t321 (or @t320 @t318))) % 0.46/0.89 (assume @p177 (forall @t321 (or @t320 @t314))) % 0.46/0.89 (assume @p178 (forall (@list @t44 @t124 @t12) (or (not (= (tptp.c_Set_Oinsert @t44 @t124 @t12) @t33)) (tptp.c_in @t44 @t124 @t12)))) % 0.46/0.89 (assume @p179 (forall (@list @t134 @t97 @t12 @t322) (or @t325 @t324))) % 0.46/0.89 (assume @p180 (forall (@list @t5 @t4 @t1 @t23 @t2 @t13) (not (= @t6 @t25)))) % 0.46/0.89 (assume @p181 (forall @t327 (or @t326 @t47))) % 0.46/0.89 (assume @p182 (forall (@list @t5 @t4 @t1 @t2 @t13) (not (= @t6 @t248)))) % 0.46/0.89 (assume @p183 (forall (@list @t102 @t39 @t12 @t44) (or @t185 @t216))) % 0.46/0.89 (assume @p184 (forall @t328 (or (= (tptp.c_Set_Oinsert @t74 @t61 @t34) @t61) @t76))) % 0.46/0.89 (assume @p185 (forall (@list @t39 @t44 @t38 @t12) (or @t329 @t41 @t75))) % 0.46/0.89 (assume @p186 (forall @t48 (or @t40 @t75 @t330))) % 0.46/0.89 (assume @p187 (forall @t48 (or @t40 @t330 @t75))) % 0.46/0.89 (assume @p188 (forall @t331 (or (not (= @t45 @t85)) @t326 @t75 @t188))) % 0.46/0.89 (assume @p189 (forall @t251 (or @t332 (= @t38 @t33)))) % 0.46/0.89 (assume @p190 (forall @t251 (or @t332 @t333))) % 0.46/0.89 (assume @p191 (forall @t335 (or @t177 @t334 (= @t39 @t171)))) % 0.46/0.89 (assume @p192 (forall @t335 (or @t177 @t334 (= @t38 @t171)))) % 0.46/0.89 (assume @p193 (forall @t159 (= (tptp.c_Com_Ocom_Ocom__case @t21 @t20 @t19 @t18 @t17 @t16 @t15 @t14 @t82 @t12) @t158))) % 0.46/0.89 (assume @p194 (forall (@list @t23 @t2 @t13 @t28 @t27) (not (= @t25 @t29)))) % 0.46/0.89 (assume @p195 (forall @t251 (= @t170 (tptp.c_Lattices_Oupper__semilattice__class_Osup @t38 @t39 @t32)))) % 0.46/0.89 (assume @p196 (forall @t260 (or @t80 @t336))) % 0.46/0.89 (assume @p197 (forall @t260 (or @t280 @t336))) % 0.46/0.89 (assume @p198 (forall @t338 (or @t337 @t3))) % 0.46/0.89 (assume @p199 (forall @t338 (or @t337 @t339))) % 0.46/0.89 (assume @p200 (forall @t200 (or (= @t44 @t231) (not (tptp.c_Option_Ois__none @t44 @t12))))) % 0.46/0.89 (assume @p201 (forall @t89 (= (tptp.c_Com_Ocom_Ocom__rec @t21 @t20 @t19 @t18 @t17 @t16 @t15 @t14 @t9 @t12) @t88))) % 0.46/0.89 (assume @p202 (forall @t179 (or (= @t54 @t39) @t204))) % 0.46/0.89 (assume @p203 (forall @t179 (= @t54 (tptp.c_Lattices_Oupper__semilattice__class_Osup @t78 @t39 @t32)))) % 0.46/0.89 (assume @p204 (forall @t340 (= (tptp.c_Option_Omap @t55 @t36 @t34 @t12) @t231))) % 0.46/0.89 (assume @p205 (forall @t251 (= (tptp.c_Lattices_Oupper__semilattice__class_Osup @t39 @t170 @t32) @t170))) % 0.46/0.89 (assume @p206 (forall @t260 (or @t80 @t341))) % 0.46/0.89 (assume @p207 (forall @t260 (or @t280 @t341))) % 0.46/0.89 (assume @p208 (forall @t303 (not (= @t49 tptp.c_Com_Ocom_OSKIP)))) % 0.46/0.89 (assume @p209 (forall (@list @t1 @t164 @t2 @t51 @t50) (not (= @t165 @t52)))) % 0.46/0.89 (assume @p210 (forall @t87 (or @t342 @t69))) % 0.46/0.89 (assume @p211 (forall (@list @t127 @t181 @t12 @t66 @t34) (or (not @t318) @t315 @t319))) % 0.46/0.89 (assume @p212 (forall @t344 (= @t149 (tptp.hAPP (tptp.hAPP @t343 @t67) @t122)))) % 0.46/0.89 (assume @p213 (forall (@list @t51 @t50 @t5 @t4 @t1) (not (= @t82 @t6)))) % 0.46/0.89 (assume @p214 (forall (@list @t66 @t109 @t64 @t91) (or (= @t66 (tptp.c_Suc @t347)) @t346))) % 0.46/0.89 (assume @p215 (forall @t116 (= (tptp.c_Com_Ocom_Ocom__rec @t21 @t20 @t19 @t18 @t17 @t16 @t15 @t14 @t30 @t12) @t115))) % 0.46/0.89 (assume @p216 (forall (@list @t1 @t28 @t27 @t8 @t2) (not (= @t49 @t30)))) % 0.46/0.89 (assume @p217 (forall @t105 (or (not (= @t241 @t55)) (= @t74 @t102)))) % 0.46/0.89 (assume @p218 (forall (@list @t209 @t181 @t34 @t210 @t12 @t114) (or (not (= @t350 @t36)) @t349))) % 0.46/0.89 (assume @p219 (forall (@list @t209 @t181 @t12 @t210 @t114 @t34) (or (not (= @t350 @t231)) (= @t351 (tptp.c_Option_Ooption_ONone @t114))))) % 0.46/0.89 (assume @p220 (forall @t219 (or @t218 (not (tptp.c_lessequals @t39 @t217 @t32)) @t70))) % 0.46/0.89 (assume @p221 (forall (@list @t55 @t38 @t12 @t34 @t39) (or @t352 @t189))) % 0.46/0.89 (assume @p222 (forall @t63 (or @t56 @t189))) % 0.46/0.89 (assume @p223 (forall @t354 (= (tptp.c_Com_Ocom_Ocom__rec @t21 @t20 @t19 @t18 @t17 @t16 @t15 @t14 @t248 @t12) (tptp.hAPP @t353 @t22)))) % 0.46/0.89 (assume @p224 (forall @t360 (or @t359 (not @t356)))) % 0.46/0.89 (assume @p225 (forall (@list @t97 @t64 @t66) (or @t361 (not (tptp.c_Natural_Oevaln tptp.c_Com_Ocom_OSKIP @t64 @t66 @t97))))) % 0.46/0.89 (assume @p226 (forall @t81 (= (tptp.hAPP @t86 @t44) @t44))) % 0.46/0.89 (assume @p227 (forall @t363 (= (tptp.c_Com_Ocom_Ocom__rec @t21 @t20 @t19 @t18 @t17 @t16 @t15 @t14 @t52 @t12) (tptp.hAPP (tptp.hAPP @t362 @t157) @t156)))) % 0.46/0.89 (assume @p228 (forall (@list @t97 @t64) (or @t361 (not (tptp.hBOOL (tptp.hAPP @t249 @t97)))))) % 0.46/0.89 (assume @p229 (forall (@list @t67 @t64 @t97 @t66) (or @t253 (not (tptp.c_Natural_Oevaln @t67 @t64 @t66 @t97))))) % 0.46/0.89 (assume @p230 (forall (@list @t67 @t64 @t97 @t44) (or @t253 (not (tptp.c_Natural_Oevaln @t67 @t64 @t44 @t97))))) % 0.46/0.89 (assume @p231 (forall (@list @t34 @t55 @t44 @t364 @t12) (or (not (tptp.class_HOL_Oord @t34)) (tptp.c_lessequals @t74 (tptp.hAPP @t364 @t44) @t34) (not (tptp.c_lessequals @t55 @t364 (tptp.tc_fun @t12 @t34)))))) % 0.46/0.89 (assume @p232 (forall (@list @t134 @t12 @t109 @t375 @t110 @t365) (or (tptp.c_Hoare__Mirabelle_Ohoare__derivs @t134 (tptp.c_Set_Oinsert (tptp.hAPP (tptp.hAPP (tptp.hAPP @t235 (tptp.hAPP @t109 @t375)) @t376) (tptp.hAPP @t110 @t375)) @t234 @t232) @t12) (not (tptp.c_in @t375 @t365 tptp.tc_Com_Opname)) @t374))) % 0.46/0.89 (assume @p233 (forall (@list @t55 @t364 @t12 @t114 @t34) (or (tptp.c_Finite__Set_Ofinite (tptp.c_Set_Oimage (tptp.c_COMBB @t55 @t364 @t12 @t114 @t34) @t117 @t34 @t114) @t114) (not (tptp.c_Finite__Set_Ofinite (tptp.c_Set_Oimage @t364 @t117 @t34 @t12) @t12))))) % 0.46/0.89 (assume @p234 (forall (@list @t55 @t39 @t38 @t34 @t12) (= (tptp.c_Set_Oimage @t55 (tptp.c_Lattices_Oupper__semilattice__class_Osup @t39 @t38 @t59) @t34 @t12) (tptp.c_Lattices_Oupper__semilattice__class_Osup @t71 @t377 @t32)))) % 0.46/0.89 (assume @p235 (forall @t378 (or (not (tptp.c_lessequals @t44 @t39 @t59)) (tptp.c_lessequals (tptp.c_Set_Oimage @t55 @t44 @t34 @t12) @t71 @t32)))) % 0.46/0.89 (assume @p236 (forall @t63 (or @t62 @t41))) % 0.46/0.89 (assume @p237 (forall (@list @t55 @t39 @t34 @t12) (or (not (= @t71 @t33)) @t237))) % 0.46/0.89 (assume @p238 (forall (@list @t55 @t53 @t38 @t34 @t12) (= (tptp.c_Set_Oimage @t55 (tptp.c_Set_Oinsert @t53 @t38 @t34) @t34 @t12) (tptp.c_Set_Oinsert @t201 @t377 @t12)))) % 0.46/0.89 (assume @p239 (forall (@list @t379 @t195 @t12 @t34) (or (tptp.c_Finite__Set_Ofinite (tptp.c_Set_Oimage @t379 @t195 @t12 @t34) @t34) @t197))) % 0.46/0.89 (assume @p240 (forall (@list @t12 @t55 @t39 @t34) (or (not (= @t33 @t71)) @t237))) % 0.46/0.89 (assume @p241 (forall @t340 (= @t380 @t33))) % 0.46/0.89 (assume @p242 (forall @t383 (or @t382 @t381 @t211))) % 0.46/0.89 (assume @p243 (forall @t383 (or @t382 @t384 @t211))) % 0.46/0.89 (assume @p244 (forall @t383 (or @t382 @t381 @t385))) % 0.46/0.89 (assume @p245 (forall @t383 (or @t382 @t384 @t385))) % 0.46/0.89 (assume @p246 (forall (@list @t110 @t386 @t243 @t67 @t64 @t66 @t109) (or (tptp.hBOOL (tptp.hAPP (tptp.hAPP @t110 @t386) @t243)) @t244 (not (tptp.hBOOL (tptp.hAPP (tptp.hAPP @t109 @t386) @t64))) (not (tptp.c_Hoare__Mirabelle_Otriple__valid @t66 (tptp.hAPP (tptp.hAPP (tptp.hAPP (tptp.c_Hoare__Mirabelle_Otriple_Otriple tptp.t_a) @t109) @t67) @t110) tptp.t_a))))) % 0.46/0.89 (assume @p247 (forall (@list @t98 @t64 @t97 @t42 @t93) (or @t387 @t65 @t268))) % 0.46/0.89 (assume @p248 (forall @t267 (or @t266 (not (tptp.hBOOL (tptp.hAPP @t270 @t91))) @t65))) % 0.46/0.89 (assume @p249 (forall @t389 (not (= tptp.c_Com_Ocom_OSKIP @t388)))) % 0.46/0.89 (assume @p250 (forall @t118 (= (tptp.c_Fun_Ofun__upd @t55 @t44 @t74 @t34 @t12) @t55))) % 0.46/0.89 (assume @p251 (forall (@list @t55 @t44 @t102 @t34 @t12) (= (tptp.hAPP @t390 @t44) @t102))) % 0.46/0.89 (assume @p252 (forall (@list @t55 @t44 @t12 @t34) (= (tptp.c_Fun_Ofun__upd @t55 @t44 @t74 @t12 @t34) @t55))) % 0.46/0.89 (assume @p253 (forall (@list @t55 @t44 @t102 @t12 @t391) (= (tptp.hAPP (tptp.c_Fun_Ofun__upd @t55 @t44 @t102 @t12 @t391) @t44) @t102))) % 0.46/0.89 (assume @p254 (forall (@list @t55 @t44 @t391 @t12) (= (tptp.c_Fun_Ofun__upd @t55 @t44 @t74 @t391 @t12) @t55))) % 0.46/0.89 (assume @p255 (forall @t272 (or (not (= @t104 @t33)) (= @t55 @t37)))) % 0.46/0.89 (assume @p256 (forall @t397 (or @t396 (= @t393 @t392)))) % 0.46/0.89 (assume @p257 (forall @t397 (or @t396 @t339))) % 0.46/0.89 (assume @p258 (forall @t397 (or @t396 (= @t395 @t394)))) % 0.46/0.89 (assume @p259 (forall @t79 (or @t333 (not (tptp.c_lessequals @t39 @t33 @t32))))) % 0.46/0.89 (assume @p260 (forall @t192 (tptp.c_lessequals @t33 @t33 @t32))) % 0.46/0.89 (assume @p261 (forall (@list @t1 @t164 @t8 @t2) (not (= @t165 @t30)))) % 0.46/0.89 (assume @p262 (forall (@list @t12 @t53 @t39) (not (= @t33 @t54)))) % 0.46/0.89 (assume @p263 (forall @t26 (= (tptp.c_Com_Ocom_Ocom__case @t21 @t20 @t19 @t18 @t17 @t16 @t15 @t14 @t25 @t12) @t24))) % 0.46/0.89 (assume @p264 (forall @t354 (= (tptp.c_Com_Ocom_Ocom__case @t21 @t20 @t19 @t18 @t17 @t16 @t15 @t14 @t248 @t12) @t353))) % 0.46/0.89 (assume @p265 (forall (@list @t53 @t12) (not (tptp.c_in @t53 @t33 @t12)))) % 0.46/0.89 (assume @p266 (forall (@list @t67 @t12) (not (tptp.c_in @t67 @t33 @t12)))) % 0.46/0.89 (assume @p267 (forall @t308 (or @t306 @t305))) % 0.46/0.89 (assume @p268 (forall @t200 @t305)) % 0.46/0.89 (assume @p269 (forall @t400 (or @t399 @t314 @t398))) % 0.46/0.89 (assume @p270 (forall (@list @t39 @t38 @t12 @t168 @t401) (or (tptp.c_lessequals @t170 (tptp.c_Lattices_Oupper__semilattice__class_Osup @t168 @t401 @t32) @t32) (not (tptp.c_lessequals @t38 @t401 @t32)) @t286))) % 0.46/0.89 (assume @p271 (forall @t79 (tptp.c_lessequals @t39 @t57 @t32))) % 0.46/0.89 (assume @p272 (forall @t81 (or (not (tptp.class_Orderings_Otop @t12)) (tptp.c_lessequals @t44 @t176 @t12)))) % 0.46/0.89 (assume @p273 (forall (@list @t55 @t44 @t102 @t12 @t34 @t39) (or (tptp.c_Fun_Oinj__on @t241 @t39 @t12 @t34) (tptp.c_in @t102 @t61 @t34) @t281))) % 0.46/0.89 (assume @p274 (forall (@list @t55 @t44 @t102 @t34 @t12 @t39) (or (= (tptp.c_Set_Oimage @t390 @t39 @t34 @t12) @t71) @t72))) % 0.46/0.89 (assume @p275 (forall @t403 (or @t402 @t3))) % 0.46/0.89 (assume @p276 (forall @t403 (or @t402 @t155))) % 0.46/0.89 (assume @p277 (forall (@list @t5 @t4 @t1 @t8 @t2) (not (= @t6 @t30)))) % 0.46/0.89 (assume @p278 (forall @t404 (not (= @t29 tptp.c_Com_Ocom_OSKIP)))) % 0.46/0.89 (assume @p279 (forall (@list @t134 @t12 @t109) (tptp.c_Hoare__Mirabelle_Ohoare__derivs @t134 (tptp.c_Set_Oinsert (tptp.hAPP (tptp.hAPP @t236 tptp.c_Com_Ocom_OSKIP) @t109) @t234 @t232) @t12))) % 0.46/0.89 (assume @p280 (forall (@list @t405 @t12 @t34 @t127) (or @t408 (not @t407)))) % 0.46/0.89 (assume @p281 (forall (@list @t127 @t405 @t12 @t34) (or @t407 (not @t408)))) % 0.46/0.89 (assume @p282 (forall @t83 (tptp.hBOOL (tptp.hAPP @t45 @t44)))) % 0.46/0.89 (assume @p283 (forall @t331 (or @t46 @t41 (not @t326)))) % 0.46/0.89 (assume @p284 (forall (@list @t55 @t364 @t44 @t34 @t102 @t12) (= (tptp.c_Map_Omap__add @t55 (tptp.c_Fun_Ofun__upd @t364 @t44 @t409 @t12 @t35) @t12 @t34) (tptp.c_Fun_Ofun__upd (tptp.c_Map_Omap__add @t55 @t364 @t12 @t34) @t44 @t409 @t12 @t35)))) % 0.46/0.89 (assume @p285 (forall @t411 (or @t410 @t339))) % 0.46/0.89 (assume @p286 (forall @t411 (or @t410 @t3))) % 0.46/0.89 (assume @p287 (forall @t411 (or @t410 (= @t23 @t183)))) % 0.46/0.89 (assume @p288 (forall @t412 (not (= tptp.c_Com_Ocom_OSKIP @t6)))) % 0.46/0.89 (assume @p289 (forall (@list @t1 @t164 @t51 @t50) (not (= @t165 @t82)))) % 0.46/0.89 (assume @p290 (forall @t192 (or @t342 (tptp.c_Finite__Set_Ofinite @t57 @t12)))) % 0.46/0.89 (assume @p291 (forall @t413 (or @t220 (not @t222)))) % 0.46/0.89 (assume @p292 (forall @t413 (or @t220 @t414))) % 0.46/0.89 (assume @p293 (forall (@list @t42 @t64 @t97 @t67) (or @t65 @t361 (not (tptp.hBOOL (tptp.hAPP @t167 @t97)))))) % 0.46/0.89 (assume @p294 (forall @t415 (not (= @t182 @t66)))) % 0.46/0.89 (assume @p295 (forall @t415 (not (= @t66 @t182)))) % 0.46/0.89 (assume @p296 (forall (@list @t210 @t44 @t12 @t209 @t181 @t34 @t114) (or (not (= @t417 @t231)) @t416 @t349))) % 0.46/0.89 (assume @p297 (forall @t298 (or @t80 @t300 @t418))) % 0.46/0.89 (assume @p298 (forall @t419 (or @t80 @t299 @t418))) % 0.46/0.89 (assume @p299 (forall @t421 (or @t80 @t420 (not (tptp.c_lessequals @t44 @t42 @t12))))) % 0.46/0.89 (assume @p300 (forall @t421 (or @t80 @t420 (not (tptp.c_lessequals @t44 @t53 @t12))))) % 0.46/0.89 (assume @p301 (forall (@list @t12 @t42 @t44 @t53) (or @t80 @t291 @t422))) % 0.46/0.89 (assume @p302 (forall (@list @t12 @t53 @t44 @t42) (or @t80 @t290 @t422))) % 0.46/0.89 (assume @p303 (forall @t424 (or @t285 @t423))) % 0.46/0.89 (assume @p304 (forall (@list @t38 @t168 @t12 @t39) (or @t287 @t423))) % 0.46/0.89 (assume @p305 (forall (@list @t12 @t240 @t44 @t102) (or @t259 @t297 (not (tptp.c_lessequals @t240 @t102 @t12)) @t258))) % 0.46/0.89 (assume @p306 (forall @t419 (or @t425 @t299 @t301 @t256))) % 0.46/0.89 (assume @p307 (forall @t327 (or @t326 @t76 @t41))) % 0.46/0.89 (assume @p308 (forall @t223 (or @t222 @t414 @t41))) % 0.46/0.89 (assume @p309 @t426) % 0.46/0.89 (assume @p310 (forall @t327 (or @t326 @t41 @t76))) % 0.46/0.89 (assume @p311 (forall (@list @t97 @t38 @t12 @t39) (or (tptp.c_in @t97 @t38 @t12) (not (tptp.c_in @t97 @t39 @t12)) @t41))) % 0.46/0.89 (assume @p312 (forall @t79 (tptp.c_lessequals @t39 @t39 @t32))) % 0.46/0.89 (assume @p313 (forall @t424 (or @t285 @t288 @t41))) % 0.46/0.89 (assume @p314 (forall @t63 (or @t56 @t41 (not @t352)))) % 0.46/0.89 (assume @p315 (forall @t429 (or @t428 @t307 @t427))) % 0.46/0.89 (assume @p316 (forall @t81 (or @t259 @t430))) % 0.46/0.89 (assume @p317 (forall @t81 (or @t425 @t430))) % 0.46/0.89 (assume @p318 (forall @t432 (or @t69 @t431 @t41))) % 0.46/0.89 (assume @p319 (forall @t429 (or @t428 @t427 @t307))) % 0.46/0.89 (assume @p320 (forall @t432 (or @t69 @t41 @t431))) % 0.46/0.89 (assume @p321 (forall @t412 (not (= @t6 tptp.c_Com_Ocom_OSKIP)))) % 0.46/0.89 (assume @p322 (forall (@list @t53 @t42 @t38 @t12) (or (tptp.c_in @t53 @t43 @t12) (not (tptp.c_in @t53 @t38 @t12))))) % 0.46/0.89 (assume @p323 (forall (@list @t53 @t42 @t39 @t12) (or @t245 @t204))) % 0.46/0.89 (assume @p324 (forall @t200 (tptp.c_in @t44 @t125 @t12))) % 0.46/0.89 (assume @p325 (forall @t363 (= (tptp.c_Com_Ocom_Ocom__case @t21 @t20 @t19 @t18 @t17 @t16 @t15 @t14 @t52 @t12) @t362))) % 0.46/0.89 (assume @p326 (forall (@list @t39 @t44 @t12) (or (= @t39 @t125) @t333 (not (tptp.c_lessequals @t39 @t125 @t32))))) % 0.46/0.89 (assume @p327 (forall (@list @t42 @t64 @t97 @t67 @t66) (or @t65 @t361 (not (tptp.c_Natural_Oevaln @t68 @t64 @t66 @t97))))) % 0.46/0.89 (assume @p328 (forall (@list @t134 @t97 @t322 @t12) (or @t323 @t434 (not @t325)))) % 0.46/0.89 (assume @p329 (forall (@list @t55 @t44 @t102 @t34 @t12 @t240) (or (= (tptp.hAPP @t390 @t240) @t436) @t435))) % 0.46/0.89 (assume @p330 (forall @t242 (or (= (tptp.hAPP @t241 @t240) @t436) @t435))) % 0.46/0.89 (assume @p331 (forall @t389 (not (= @t388 tptp.c_Com_Ocom_OSKIP)))) % 0.46/0.89 (assume @p332 (forall (@list @t53 @t168 @t12 @t401) (or (tptp.c_lessequals (tptp.c_Set_Oinsert @t53 @t168 @t12) (tptp.c_Set_Oinsert @t53 @t401 @t12) @t32) (not (tptp.c_lessequals @t168 @t401 @t32))))) % 0.46/0.89 (assume @p333 (forall (@list @t39 @t34 @t55 @t12) (or (tptp.c_Finite__Set_Ofinite @t39 @t34) (not (tptp.c_Fun_Oinj__on @t55 @t39 @t34 @t12)) (not (tptp.c_Finite__Set_Ofinite @t71 @t12))))) % 0.46/0.89 (assume @p334 (forall @t192 (= (tptp.c_Lattices_Oupper__semilattice__class_Osup @t33 @t33 @t32) @t33))) % 0.46/0.89 (assume @p335 (forall (@list @t98 @t64 @t66 @t97 @t93 @t42) (or @t247 @t101 @t100))) % 0.46/0.89 (assume @p336 (forall @t360 (or @t359 (tptp.c_in @t127 (tptp.c_Map_Odom @t357 @t12 @t34) @t12)))) % 0.46/0.89 (assume @p337 (forall @t360 (or (= @t358 (tptp.hAPP @t357 @t127)) @t356))) % 0.46/0.89 (assume @p338 (forall (@list @t23 @t2 @t13 @t5 @t4 @t1) (not (= @t25 @t6)))) % 0.46/0.89 (assume @p339 (forall (@list @t98 @t64 @t97 @t93 @t42) (or @t387 @t271 @t268))) % 0.46/0.89 (assume @p340 (forall @t404 (not (= tptp.c_Com_Ocom_OSKIP @t29)))) % 0.46/0.89 (assume @p341 (forall @t296 (or (not (tptp.class_Orderings_Olinorder @t12)) @t257 @t255))) % 0.46/0.89 (assume @p342 (forall (@list @t12 @t437) (= (tptp.c_Set_Oimage @t86 @t437 @t12 @t12) @t437))) % 0.46/0.89 (assume @p343 (forall (@list @t12 @t55 @t34) (= @t33 @t380))) % 0.46/0.89 (assume @p344 (forall (@list @t44 @t39 @t391 @t55 @t12) (or (not (tptp.c_in @t44 @t39 @t391)) (tptp.c_in @t74 (tptp.c_Set_Oimage @t55 @t39 @t391 @t12) @t12)))) % 0.46/0.89 (assume @p345 (forall @t378 (or @t73 @t438))) % 0.46/0.89 (assume @p346 (forall (@list @t55 @t44 @t39 @t34 @t12) (or @t438 @t73))) % 0.46/0.89 (assume @p347 (forall @t328 (or (tptp.c_in @t74 @t61 @t34) @t76))) % 0.46/0.89 (assume @p348 (forall @t439 (or (tptp.c_Hoare__Mirabelle_Ohoare__valids @t134 @t372 @t12) (not (tptp.c_Hoare__Mirabelle_Ohoare__valids @t373 @t371 @t12))))) % 0.46/0.89 (assume @p349 (forall (@list @t127 @t53 @t34 @t44 @t12 @t66 @t102) (or (not (= (tptp.c_Fun_Ofun__upd @t127 @t53 @t180 @t12 @t35) (tptp.c_Fun_Ofun__upd @t66 @t53 @t409 @t12 @t35))) @t205))) % 0.46/0.89 (assume @p350 (forall @t442 (= (tptp.c_Option_Ooption_Ooption__rec @t21 @t20 @t441 @t12 @t34) @t440))) % 0.46/0.89 (assume @p351 (forall (@list @t97 @t181 @t12 @t44 @t34) (or (not (= (tptp.hAPP @t97 @t181) @t310)) (= (tptp.c_Fun_Ofun__upd @t97 @t181 @t310 @t34 @t443) @t97)))) % 0.46/0.89 (assume @p352 (forall (@list @t127 @t124 @t12 @t44 @t391) (= (tptp.hAPP (tptp.c_Fun_Ofun__upd @t127 @t124 @t310 @t391 @t443) @t124) @t310))) % 0.46/0.89 (assume @p353 (forall (@list @t210 @t44 @t12 @t444 @t209 @t181 @t34 @t114) (or (not (= @t417 @t445)) @t416 (= @t348 @t445)))) % 0.46/0.89 (assume @p354 (forall (@list @t109 @t21 @t20 @t124) (or (not (tptp.hBOOL (tptp.hAPP @t109 (tptp.c_Option_Ooption_Ooption__case @t21 @t20 (tptp.hAPP @t446 @t124) tptp.t_a tptp.t_b)))) (tptp.hBOOL (tptp.hAPP @t109 (tptp.hAPP @t20 @t124)))))) % 0.46/0.89 (assume @p355 (forall (@list @t109 @t21 @t20 @t53) (or (not (tptp.hBOOL (tptp.hAPP @t109 (tptp.c_Option_Ooption_Ooption__case @t21 @t20 (tptp.hAPP @t446 @t53) tptp.t_a tptp.t_b)))) (tptp.hBOOL (tptp.hAPP @t109 @t440))))) % 0.46/0.89 (assume @p356 (forall @t87 (tptp.c_Fun_Oinj__on @t309 @t39 @t12 @t443))) % 0.46/0.89 (assume @p357 (forall @t81 (not (tptp.c_Option_Ois__none @t310 @t12)))) % 0.46/0.89 (assume @p358 (forall (@list @t12 @t124) (not (= (tptp.hAPP @t309 @t124) @t231)))) % 0.46/0.89 (assume @p359 (forall @t449 (not (= @t448 @t231)))) % 0.46/0.89 (assume @p360 (forall (@list @t127 @t44 @t12 @t102 @t53 @t42 @t34) (or (not @t454) @t453 @t452))) % 0.46/0.89 (assume @p361 (forall @t457 (or @t456 @t454 @t455))) % 0.46/0.89 (assume @p362 (forall @t457 (or @t456 @t454 @t453))) % 0.46/0.89 (assume @p363 (forall @t442 (= (tptp.c_Option_Ooption_Ooption__case @t21 @t20 @t441 @t12 @t34) @t440))) % 0.46/0.89 (assume @p364 (forall (@list @t42 @t102 @t127 @t44 @t391 @t12) (or @t455 (not (= (tptp.hAPP (tptp.c_Fun_Ofun__upd @t127 @t44 (tptp.hAPP @t458 @t42) @t12 (tptp.tc_Option_Ooption @t391)) @t44) (tptp.hAPP @t458 @t102)))))) % 0.46/0.89 (assume @p365 (forall (@list @t12 @t102) (not (= @t231 @t450)))) % 0.46/0.89 (assume @p366 (forall @t449 (not (= @t231 @t448)))) % 0.46/0.89 (assume @p367 (forall @t400 (or @t399 @t317 @t398))) % 0.46/0.89 (assume @p368 (forall (@list @t55 @t34 @t44 @t12) (= (tptp.c_Option_Omap @t55 @t180 @t34 @t12) (tptp.hAPP @t309 @t74)))) % 0.46/0.89 (assume @p369 (forall (@list @t209 @t181 @t12 @t459 @t210 @t114 @t34) (or (not (= @t350 (tptp.hAPP @t309 @t459))) (= @t351 (tptp.hAPP @t210 @t459))))) % 0.46/0.89 (assume @p370 (forall (@list @t109 @t12 @t44) (or (not (tptp.hBOOL (tptp.hAPP @t109 (tptp.c_ATP__Linkup_Osko__Option__Xospec__1__1 @t310 @t109 @t12)))) @t306))) % 0.46/0.89 (assume @p371 (forall (@list @t66 @t181 @t12 @t460 @t127 @t34) (or (not (= @t313 @t461)) (= @t311 @t461)))) % 0.46/0.89 (assume @p372 (forall (@list @t66 @t181 @t12 @t44 @t127 @t34) (or (not @t398) @t312))) % 0.46/0.89 (assume @p373 (forall @t463 (not (= @t462 tptp.c_Com_Ocom_OSKIP)))) % 0.46/0.89 (assume @p374 (forall (@list @t2 @t13 @t4) (not (= @t248 @t462)))) % 0.46/0.89 (assume @p375 (forall @t466 (= (tptp.c_Com_Ocom_Ocom__rec @t21 @t20 @t19 @t18 @t17 @t16 @t15 @t14 @t465 @t12) @t464))) % 0.46/0.89 (assume @p376 (forall (@list @t4 @t2 @t51 @t50) (not (= @t462 @t52)))) % 0.46/0.89 (assume @p377 (forall (@list @t2 @t51 @t50 @t4) (not (= @t52 @t462)))) % 0.46/0.89 (assume @p378 (forall (@list @t4 @t8 @t2) (not (= @t462 @t30)))) % 0.46/0.89 (assume @p379 (forall (@list @t8 @t2 @t4) (not (= @t30 @t462)))) % 0.46/0.89 (assume @p380 (forall (@list @t4 @t23 @t2 @t13) (not (= @t462 @t25)))) % 0.46/0.89 (assume @p381 (forall (@list @t4 @t2 @t13) (not (= @t462 @t248)))) % 0.46/0.89 (assume @p382 (forall (@list @t5 @t4 @t1 @t7) (not (= @t6 @t465)))) % 0.46/0.89 (assume @p383 (forall (@list @t4 @t51 @t50) (not (= @t462 @t82)))) % 0.46/0.89 (assume @p384 (forall (@list @t51 @t50 @t4) (not (= @t82 @t462)))) % 0.46/0.89 (assume @p385 (forall (@list @t23 @t2 @t13 @t4) (not (= @t25 @t462)))) % 0.46/0.89 (assume @p386 (forall (@list @t7 @t5 @t4 @t1) (not (= @t465 @t6)))) % 0.46/0.89 (assume @p387 (forall @t466 (= (tptp.c_Com_Ocom_Ocom__case @t21 @t20 @t19 @t18 @t17 @t16 @t15 @t14 @t465 @t12) @t464))) % 0.46/0.89 (assume @p388 (forall @t463 (not (= tptp.c_Com_Ocom_OSKIP @t462)))) % 0.46/0.89 (assume @p389 (forall (@list @t134 @t322 @t12 @t97) (or @t433 @t324))) % 0.46/0.89 (assume @p390 (forall (@list @t134 @t322 @t12 @t467) (or @t433 (not (tptp.c_lessequals @t322 @t467 @t233)) (not (tptp.c_Hoare__Mirabelle_Ohoare__derivs @t134 @t467 @t12))))) % 0.46/0.89 (assume @p391 (forall @t470 (or @t433 (not (tptp.c_lessequals @t468 @t134 @t233)) @t469))) % 0.46/0.89 (assume @p392 (forall (@list @t134 @t12) (tptp.c_Hoare__Mirabelle_Ohoare__derivs @t134 @t234 @t12))) % 0.46/0.89 (assume @p393 (forall @t471 (or (tptp.c_Hoare__Mirabelle_Ohoare__valids @t134 @t322 @t12) @t434))) % 0.46/0.89 (assume @p394 (forall @t471 (or @t433 (not (tptp.c_lessequals @t322 @t134 @t233))))) % 0.46/0.89 (assume @p395 (forall (@list @t34 @t102 @t12) (= (tptp.c_Map_Odom (tptp.c_COMBK @t409 @t35 @t12) @t12 @t34) @t57))) % 0.46/0.89 (assume @p396 (forall @t228 (or (= @t226 (tptp.hAPP @t145 (tptp.c_Map_Osko__Map__XdomD__1__1 @t53 @t127 @t12 @t34))) @t225))) % 0.46/0.89 (assume @p397 (forall @t478 (or @t477 (not @t475)))) % 0.46/0.89 (assume @p398 (forall @t478 (or @t475 (not @t477)))) % 0.46/0.89 (assume @p399 (forall (@list @t93 @t42 @t98) (or @t480 @t479))) % 0.46/0.89 (assume @p400 (forall (@list @t98 @t42 @t93) (or @t481 @t479))) % 0.46/0.89 (assume @p401 (forall (@list @t92 @t93) (or (tptp.c_Com_OWT @t126) @t483 @t482))) % 0.46/0.89 (assume @p402 (forall (@list @t93 @t98) (or @t480 @t484))) % 0.46/0.89 (assume @p403 (forall (@list @t98 @t93) (or @t481 @t484))) % 0.46/0.89 (assume @p404 (forall (@list @t42 @t92 @t93) (or (tptp.c_Com_OWT @t94) @t483 @t482))) % 0.46/0.89 (assume @p405 (tptp.c_Com_OWT tptp.c_Com_Ocom_OSKIP)) % 0.46/0.89 (assume @p406 (forall (@list @t485 @t53) (tptp.c_Com_OWT (tptp.c_Com_Ocom_OAss @t485 @t53)))) % 0.46/0.89 (assume @p407 (forall (@list @t42 @t67) (or @t488 @t487))) % 0.46/0.89 (assume @p408 (forall (@list @t67 @t42) (or @t486 (not @t488)))) % 0.46/0.89 (assume @p409 (forall (@list @t437 @t53 @t67) (or @t489 @t487))) % 0.46/0.89 (assume @p410 (forall (@list @t67 @t437 @t53) (or @t486 (not @t489)))) % 0.46/0.89 (assume @p411 (= (tptp.hAPP tptp.c_Hoare__Mirabelle_OMGT tptp.v_c) (tptp.hAPP (tptp.hAPP @t343 tptp.v_c) (tptp.c_Natural_Oevalc tptp.v_c)))) % 0.46/0.89 (assume @p412 (forall (@list @t97) (or (not (= (tptp.v_sko__Hoare__Mirabelle__Xsingle__stateE__1 @t97) @t97)) @t490))) % 0.46/0.89 (assume @p413 (forall @t439 (or (tptp.c_Hoare__Mirabelle_Ohoare__derivs @t134 @t372 @t12) @t374))) % 0.46/0.89 (assume @p414 (forall @t493 (or @t492 (not (tptp.c_Hoare__Mirabelle_Ohoare__derivs (tptp.c_Set_Oinsert @t476 @t134 @t232) @t491 @t12))))) % 0.46/0.89 (assume @p415 (forall @t493 (or @t492 (not (tptp.c_Hoare__Mirabelle_Ohoare__derivs @t134 @t491 @t12))))) % 0.46/0.89 (assume @p416 (forall (@list @t109 @t64 @t66 @t91) (or (tptp.c_Natural_Oevaln @t495 @t64 @t347 @t91) @t346))) % 0.46/0.89 (assume @p417 (forall (@list @t375 @t119 @t66 @t91) (or (tptp.c_Natural_Oevaln @t376 @t119 @t182 @t91) (not (tptp.c_Natural_Oevaln @t473 @t119 @t66 @t91))))) % 0.46/0.89 (assume @p418 (forall (@list @t55 @t364 @t114 @t12 @t34) (= (tptp.c_Set_Oimage (tptp.c_COMBB @t55 @t364 @t114 @t12 @t34) @t117 @t34 @t12) (tptp.c_Set_Oimage @t55 (tptp.c_Set_Oimage @t364 @t117 @t34 @t114) @t114 @t12)))) % 0.46/0.89 (assume @p419 (forall @t499 (or @t498 @t487 (tptp.c_in @t497 @t496 tptp.tc_Com_Opname) @t490))) % 0.46/0.89 (assume @p420 (forall @t499 (or @t498 @t487 (not (tptp.c_Hoare__Mirabelle_Ohoare__derivs @t134 (tptp.c_Set_Oinsert (tptp.hAPP tptp.c_Hoare__Mirabelle_OMGT (tptp.hAPP tptp.c_Com_Ocom_OBODY @t497)) @t148 @t146) tptp.tc_Com_Ostate)) @t490))) % 0.46/0.89 (assume @p421 (forall (@list @t127 @t53 @t12 @t42 @t34) (or (not (= @t226 @t451)) (tptp.c_in @t53 (tptp.c_Map_Odom @t127 @t34 @t12) @t34)))) % 0.46/0.89 (assume @p422 (forall (@list @t55 @t44 @t12 @t102 @t34) (or (not (= @t74 @t450)) (= (tptp.c_Set_Oinsert @t44 @t500 @t34) @t500)))) % 0.46/0.89 (assume @p423 (forall (@list @t485 @t375 @t53) (or (tptp.c_Com_OWT (tptp.c_Com_Ocom_OCall @t485 @t375 @t53)) (not @t501)))) % 0.46/0.89 (assume @p424 (forall (@list @t109 @t485 @t53) (or @t502 (not (tptp.c_Com_OWT (tptp.c_Com_Ocom_OCall @t485 @t109 @t53)))))) % 0.46/0.89 (assume @p425 (tptp.c_Finite__Set_Ofinite @t496 tptp.tc_Com_Opname)) % 0.46/0.89 (assume @p426 (forall (@list @t134 @t375) (or (tptp.c_Hoare__Mirabelle_Ohoare__derivs @t134 (tptp.c_Set_Oinsert @t503 @t148 @t146) tptp.tc_Com_Ostate) (not (tptp.c_Hoare__Mirabelle_Ohoare__derivs (tptp.c_Set_Oinsert @t503 @t134 @t146) (tptp.c_Set_Oinsert (tptp.hAPP tptp.c_Hoare__Mirabelle_OMGT @t473) @t148 @t146) tptp.tc_Com_Ostate))))) % 0.46/0.89 (assume @p427 (forall @t344 (or @t151 @t487 @t504 @t490))) % 0.46/0.89 (assume @p428 (forall (@list @t375 @t119 @t91) (or (tptp.hBOOL (tptp.hAPP (tptp.hAPP (tptp.c_Natural_Oevalc @t376) @t119) @t91)) (not (tptp.hBOOL (tptp.hAPP (tptp.hAPP (tptp.c_Natural_Oevalc @t473) @t119) @t91)))))) % 0.46/0.89 (assume @p429 (forall (@list @t109 @t64 @t91) (or (tptp.hBOOL (tptp.hAPP (tptp.hAPP (tptp.c_Natural_Oevalc @t495) @t64) @t91)) (not (tptp.hBOOL (tptp.hAPP (tptp.hAPP (tptp.c_Natural_Oevalc @t345) @t64) @t91)))))) % 0.46/0.89 (assume @p430 (forall (@list @t375) (or @t501 (= @t472 (tptp.c_Option_Ooption_ONone tptp.tc_Com_Ocom))))) % 0.46/0.89 (assume @p431 (forall (@list @t134 @t365) (or (tptp.c_Hoare__Mirabelle_Ohoare__derivs @t134 @t507 tptp.tc_Com_Ostate) (not (tptp.c_Finite__Set_Ofinite @t365 tptp.tc_Com_Opname)) (not (tptp.c_Hoare__Mirabelle_Ohoare__derivs (tptp.c_Lattices_Oupper__semilattice__class_Osup @t134 @t507 @t147) (tptp.c_Set_Oimage @t505 @t365 tptp.tc_Com_Opname @t146) tptp.tc_Com_Ostate))))) % 0.46/0.89 (assume @p432 (forall (@list @t109) (or (= @t494 (tptp.hAPP @t508 (tptp.c_Com_Osko__Com__XWTs__elim__cases__7__1 @t109))) (not @t502)))) % 0.46/0.89 (assume @p433 @t515) % 0.46/0.89 (assume @p434 (forall @t81 (= (tptp.hAPP (tptp.c_Option_Othe @t12) @t310) @t44))) % 0.46/0.89 (assume @p435 (forall (@list @t375 @t42) (or (not (= @t472 (tptp.hAPP @t508 @t42))) @t504 (tptp.c_Com_OWT @t42)))) % 0.46/0.89 (assume @p436 (forall (@list @t55 @t364 @t39 @t114 @t34 @t12) (= (tptp.c_Set_Oimage @t55 (tptp.c_Set_Oimage @t364 @t39 @t114 @t34) @t34 @t12) (tptp.c_Set_Oimage (tptp.c_COMBB @t55 @t364 @t34 @t12 @t114) @t39 @t114 @t12)))) % 0.46/0.89 (assume @p437 (forall @t470 (or @t433 (not (tptp.c_Hoare__Mirabelle_Ohoare__derivs @t134 @t468 @t12)) @t469))) % 0.46/0.89 (assume @p438 (forall (@list @t12 @t53 @t447) (or (not (= (tptp.hAPP @t309 @t53) @t448)) (= @t53 @t447)))) % 0.46/0.89 (assume @p439 (forall (@list @t44 @t124) (or tptp.c_Hoare__Mirabelle_Ostate__not__singleton @t284))) % 0.46/0.89 (assume @p440 (forall (@list @t109 @t110 @t34 @t12 @t114 @t111) (= (tptp.hAPP (tptp.c_COMBB @t109 @t110 @t34 @t12 @t114) @t111) (tptp.hAPP @t109 @t112)))) % 0.46/0.89 (assume @p441 (forall (@list @t7 @t4) (or (not (= @t465 @t462)) @t154))) % 0.46/0.89 (assume @p442 tptp.c_Hoare__Mirabelle_Ostate__not__singleton) % 0.46/0.89 (assume @p443 tptp.c_Com_OWT__bodies) % 0.46/0.89 (assume @p444 (tptp.c_Com_OWT tptp.v_c)) % 0.46/0.89 (assume @p445 (= (tptp.hAPP tptp.c_Com_Obody tptp.v_pn) (tptp.hAPP @t508 tptp.v_y))) % 0.46/0.89 (assume @p446 (not @t516)) % 0.46/0.89 (assume @p447 (forall @t521 (or (tptp.class_Lattices_Oupper__semilattice @t520) @t518))) % 0.46/0.89 (assume @p448 (forall @t521 (or (tptp.class_Lattices_Obounded__lattice @t520) (not (tptp.class_Lattices_Obounded__lattice @t517))))) % 0.46/0.89 (assume @p449 (forall @t521 (or (tptp.class_Finite__Set_Ofinite_Ofinite @t520) @t522 (not (tptp.class_Finite__Set_Ofinite_Ofinite @t519))))) % 0.46/0.89 (assume @p450 (forall @t521 (or (tptp.class_Orderings_Opreorder @t520) (not (tptp.class_Orderings_Opreorder @t517))))) % 0.46/0.89 (assume @p451 (forall @t521 (or (tptp.class_Lattices_Olattice @t520) @t518))) % 0.46/0.89 (assume @p452 (forall @t521 (or (tptp.class_Orderings_Oorder @t520) (not (tptp.class_Orderings_Oorder @t517))))) % 0.46/0.89 (assume @p453 (forall @t521 (or (tptp.class_Orderings_Otop @t520) (not (tptp.class_Orderings_Otop @t517))))) % 0.46/0.89 (assume @p454 (forall @t521 (or (tptp.class_Orderings_Obot @t520) (not (tptp.class_Orderings_Obot @t517))))) % 0.46/0.89 (assume @p455 (forall @t521 (or (tptp.class_HOL_Oord @t520) (not (tptp.class_HOL_Oord @t517))))) % 0.46/0.89 (assume @p456 (tptp.class_Lattices_Oupper__semilattice tptp.tc_nat)) % 0.46/0.89 (assume @p457 (tptp.class_Orderings_Opreorder tptp.tc_nat)) % 0.46/0.89 (assume @p458 (tptp.class_Orderings_Olinorder tptp.tc_nat)) % 0.46/0.89 (assume @p459 (tptp.class_Lattices_Olattice tptp.tc_nat)) % 0.46/0.89 (assume @p460 (tptp.class_Orderings_Oorder tptp.tc_nat)) % 0.46/0.89 (assume @p461 (tptp.class_Orderings_Obot tptp.tc_nat)) % 0.46/0.89 (assume @p462 (tptp.class_HOL_Oord tptp.tc_nat)) % 0.46/0.89 (assume @p463 (tptp.class_Lattices_Oupper__semilattice tptp.tc_bool)) % 0.46/0.89 (assume @p464 (tptp.class_Lattices_Obounded__lattice tptp.tc_bool)) % 0.46/0.89 (assume @p465 (tptp.class_Finite__Set_Ofinite_Ofinite tptp.tc_bool)) % 0.46/0.89 (assume @p466 (tptp.class_Orderings_Opreorder tptp.tc_bool)) % 0.46/0.89 (assume @p467 (tptp.class_Lattices_Olattice tptp.tc_bool)) % 0.46/0.89 (assume @p468 (tptp.class_Orderings_Oorder tptp.tc_bool)) % 0.46/0.89 (assume @p469 (tptp.class_Orderings_Otop tptp.tc_bool)) % 0.46/0.89 (assume @p470 (tptp.class_Orderings_Obot tptp.tc_bool)) % 0.46/0.89 (assume @p471 (tptp.class_HOL_Oord tptp.tc_bool)) % 0.46/0.89 (assume @p472 (forall (@list @t517) (or (tptp.class_Finite__Set_Ofinite_Ofinite (tptp.tc_Option_Ooption @t517)) @t522))) % 0.46/0.89 (assume @p473 (forall (@list @t109 @t110 @t111 @t34 @t114 @t12) (= (tptp.c_COMBC @t109 @t110 @t111 @t34 @t114 @t12) (tptp.hAPP @t113 @t110)))) % 0.46/0.89 (assume @p474 (forall @t81 (tptp.hBOOL (tptp.hAPP (tptp.hAPP @t523 @t44) @t44)))) % 0.46/0.89 (assume @p475 (forall (@list @t485 @t437 @t12) (or (= @t485 @t437) (not (tptp.hBOOL (tptp.hAPP (tptp.hAPP @t523 @t485) @t437)))))) % 0.46/0.89 (step @p476 :rule quant-miniscope-or :args ((= (forall @t514 @t526) (or @t504 @t490 @t525)))) % 0.46/0.89 (step @p477 :rule aci_norm :args ((= @t513 @t526))) % 0.46/0.89 (step @p478 :rule cong :premises (@p477) :args (@t515)) % 0.46/0.89 (step @p479 :rule trans :premises (@p478 @p476)) % 0.46/0.89 (step @p480 :rule eq_resolve :premises (@p433 @p479)) % 0.46/0.89 (step @p481 :rule reordering :premises (@p480) :args ((or @t490 @t504 @t525))) % 0.46/0.89 (step @p482 :rule chain_m_resolution :premises (@p481 @p442 @p443) :args (@t525 (@list false false) (@list tptp.c_Hoare__Mirabelle_Ostate__not__singleton tptp.c_Com_OWT__bodies))) % 0.46/0.89 (step @p483 :rule instantiate :premises (@p482) :args ((@list @t509))) % 0.46/0.89 (step @p484 :rule cnf_or_pos :args (@t529)) % 0.46/0.89 (step @p485 :rule reordering :premises (@p484) :args ((or @t516 @t528 (not @t529)))) % 0.46/0.89 (step @p486 :rule chain_m_resolution :premises (@p485 @p446 @p483) :args (@t528 @t530 (@list @t516 @t529))) % 0.46/0.89 (assume-push @p493 @t426) % 0.46/0.89 (step @p488 :rule instantiate :premises (@p309) :args ((@list @t509 @t146))) % 0.46/0.89 (step-pop @p494 :rule scope :premises (@p488)) % 0.46/0.89 (step @p489 :rule process_scope :premises (@p494) :args (@t527)) % 0.46/0.89 (step @p491 :rule implies_elim :premises (@p489)) % 0.46/0.89 (step @p492 false :rule chain_m_resolution :premises (@p491 @p486 @p309) :args (false @t530 (@list @t527 @t426))) % 0.46/0.89 ) % 0.46/0.89 % SZS output end Proof % 0.46/0.89 % cvc5 exiting %------------------------------------------------------------------------------