@@ -125,8 +125,7 @@ impl CKeyHashMap {
125125 }
126126 res
127127 }
128- #[ verifier( external_body) ]
129- pub broadcast proof fn lemma_to_vec( self )
128+ pub axiom fn lemma_to_vec( self )
130129 ensures
131130 #![ trigger self . spec_to_vec( ) ]
132131 Self :: spec_from_vec( self . spec_to_vec( ) ) == self ,
@@ -138,17 +137,15 @@ impl CKeyHashMap {
138137 let ( k, v) = self . spec_to_vec( ) [ i] @;
139138 self @. contains_pair( k, v)
140139 } ) ;
141- #[ verifier( external_body) ]
142- pub proof fn lemma_to_vec_view( self , other: Self )
140+ pub axiom fn lemma_to_vec_view( self , other: Self )
143141 ensures
144142 ( self @ == other@ <==> self . spec_to_vec( ) @ == other. spec_to_vec( ) @)
145143 && ( self @ == other@ <==> (
146144 self . spec_to_vec( ) . len( ) == other. spec_to_vec( ) . len( ) &&
147145 forall |i: int| #![ auto] 0 <= i < self . spec_to_vec( ) . len( ) ==>
148146 self . spec_to_vec( ) [ i] @ == other. spec_to_vec( ) [ i] @
149147 ) ) ;
150- #[ verifier( external_body) ]
151- pub broadcast proof fn lemma_from_vec( v: Vec <CKeyKV >)
148+ pub axiom fn lemma_from_vec( v: Vec <CKeyKV >)
152149 ensures
153150 #![ trigger Self :: spec_from_vec( v) ]
154151 spec_sorted_keys( v) ==> Self :: spec_from_vec( v) . spec_to_vec( ) == v;
0 commit comments