ダフニーを通過させるために、以下に何を追加する必要があるのだろうか?
function mapper (input: seq<int>) : seq<(int, int)>
ensures |mapper(input)| == |input|
{
if |input| == 0 then []
else [(0,input[0])] + mapper(input[1..])
}
// given [(0,n1), (0,n2) ... ] recovers [n1, n2, ...]
function retList (input: seq<(int, int)>, v : int) : seq<int>
ensures |input| >= |retList(input, v)|
ensures forall i :: 0 <= i < |input| && input[i].0 == v ==> input[i].1 in retList(input, v)
ensures forall x,y : int :: (x,y) in input && x == v ==> y in retList(input, v)
{
if input == [] then []
else if input[0].0 == v then [input[0].1] + retList(input[1..], v)
else retList(input[1..], v)
}
method test (input: seq<int>)
requires |input| > 0
{
assert retList(mapper(input), 0) == input;
}