arelV0V0F
arelV1V3IarelV2V3IarelV1V2F
a=V4V5IarelV5V4IarelV4V5F
arelaeV6IamemV6aaFAamemaeaa
amemafV7aaIamemV7aaF
arelafV8afV9IarelV8V9IamemV9aaIamemV8aaF
arelV13V14IafixpointV14FAafixpointV13EIarelV12V15IafixpointV15FAafixpointV12FAarelV11afV11AarelV11V16IafixpointV16FAamemV17V10IarelV11V17IamemV17aaFAasubsetV10aaAamemV11aaLaeLaaAarelV21V22IafixpointV22FAafixpointV21IiarelV21V23IafixpointV23FAafixpointV21a=V21V18a=V18V20FAarelV20afV20AarelV20V25IafixpointV25FAamemV26V24IarelV20V26IamemV26aaFAasubsetV24aaAamemV20aaAa<acardinalV24acardinalV19Aa<=c0acardinalV19LaremoveV18V19INa=V18V20LafV18IarelV18afV18AarelV18V27IafixpointV27FAamemV28V19IarelV18V28IamemV28aaFAasubsetV19aaAamemV18aaF
VC for least_fix_point
asubsetaaaaAamemaeaa
loop invariant init
amemV10aaIarelaeV10IamemV10aaFIasubsetaaaaAamemaeaa
arelaeV10IafixpointV10FIamemV11aaIarelaeV11IamemV11aaFIasubsetaaaaAamemaeaa
arelaeafaeIarelaeV10IafixpointV10FIamemV11aaIarelaeV11IamemV11aaFIasubsetaaaaAamemaeaa
a<acardinalV12acardinalV10Aa<=c0acardinalV10Ia=V13afV11FIa=V12aremoveV11V10FINa=afV11V11IarelV11afV11AarelV11V14IafixpointV14FAamemV15V10IarelV11V15IamemV15aaFAasubsetV10aaAamemV11aaF
loop variant decrease
asubsetV12aaAamemV13aaIa=V13afV11FIa=V12aremoveV11V10FINa=afV11V11IarelV11afV11AarelV11V14IafixpointV14FAamemV15V10IarelV11V15IamemV15aaFAasubsetV10aaAamemV11aaF
loop invariant preservation
amemV14V12IarelV13V14IamemV14aaFIasubsetV12aaAamemV13aaIa=V13afV11FIa=V12aremoveV11V10FINa=afV11V11IarelV11afV11AarelV11V15IafixpointV15FAamemV16V10IarelV11V16IamemV16aaFAasubsetV10aaAamemV11aaF
arelV13V14IafixpointV14FIamemV15V12IarelV13V15IamemV15aaFIasubsetV12aaAamemV13aaIa=V13afV11FIa=V12aremoveV11V10FINa=afV11V11IarelV11afV11AarelV11V16IafixpointV16FAamemV17V10IarelV11V17IamemV17aaFAasubsetV10aaAamemV11aaF
arelV13afV13IarelV13V14IafixpointV14FIamemV15V12IarelV13V15IamemV15aaFIasubsetV12aaAamemV13aaIa=V13afV11FIa=V12aremoveV11V10FINa=afV11V11IarelV11afV11AarelV11V16IafixpointV16FAamemV17V10IarelV11V17IamemV17aaFAasubsetV10aaAamemV11aaF
arelV12V13IafixpointV13FAafixpointV12EINNa=afV11V11IarelV11afV11AarelV11V14IafixpointV14FAamemV15V10IarelV11V15IamemV15aaFAasubsetV10aaAamemV11aaF
postcondition
iarelV12V13IafixpointV13FAafixpointV12EarelV15afV15AarelV15V16IafixpointV16FAamemV17V14IarelV15V17IamemV17aaFAasubsetV14aaAamemV15aaAa<acardinalV14acardinalV10Aa<=c0acardinalV10Ia=V15afV11FIa=V14aremoveV11V10FNa=afV11V11IarelV11afV11AarelV11V18IafixpointV18FAamemV19V10IarelV11V19IamemV19aaFAasubsetV10aaAamemV11aaFAarelaeafaeAarelaeV20IafixpointV20FAamemV21aaIarelaeV21IamemV21aaFAasubsetaaaaAamemaeaa

d9282e075ac9cbbc0df62ed2ce3910c5 7H6H5H4H3H2H1H0
53a479aeef17b3697e18ad740f0a2fc6 7H22H5H4H3H2H1H0
f67b38dcd77710d86e8a433510ba7316 9H8H5H4H3H2H1H0
4932ea57d4828b12ee54a03d28f25837 9H10H5H4H3H2H1H0
fce4e5321e2ba105013182ff9f6a1a89 9H11H5H4H3H2H1H0
1b1c2015224365d3648924e2112d7177 9H12H5H4H3H2H1H0
d780c544e8c1545b5f16bde323ac9984 14H13H5H4H3H2H1H0
b64b72430f453c23dca21eb3bd13701c 16H15H5H4H3H2H1H0
3177e7bac3d8136c63020573fa780f30 16H17H5H4H3H2H1H0
e0220923a5d1301011b7504276fdfd07 16H18H5H4H3H2H1H0
53b8d9e9860be10cc5a34c81c51baf83 16H19H5H4H3H2H1H0
99e3acdb779b14f4cc2a30c261357763 21H20H5H4H3H2H1H0
