Definition sch_spec (p : Z) (t : Z_btree) :=
  search t -> {occ p t} + {~ occ p t}.Definition sch : forall (p : Z) (t : Z_btree), sch_spec p t.(*
let rec sch p t x =
  match t with
    Z_leaf -> right
  | Z_bnode (n, t1, t2) ->
      (match Z_le_gt_dec p n with
         left ->
           (match match Zcompare p n with
                    EGAL -> right
                  | INFERIEUR -> left
                  | SUPERIEUR -> assert false  with
              left -> sch p t1 prop
            | right -> left)
       | right -> sch p t2 prop)
*)


(* 
 Definition of an INSERT predicate (a la  Prolog)
***************************************************

We begin with the definition of a predicate:

(INSERT n t t') if t' is a binary search tree containing exactly
  n and the elements of t *)

Inductive INSERT (n : Z) (t t' : Z_btree) : Prop :=
    insert_intro :
      (forall p : Z, occ p t -> occ p t') ->
      occ n t' ->
      (forall p : Z, occ p t' -> occ p t \/ n = p) ->
      search t' -> INSERT n t t'.(*
let rec sch p t x =
  match t with
    Z_leaf -> right
  | Z_bnode (n, t1, t2) ->
      (match Z_le_gt_dec p n with
         left ->
           (match match Zcompare p n with
                    EGAL -> right
                  | INFERIEUR -> left
                  | SUPERIEUR -> assert false  with
              left -> sch p t1 prop
            | right -> left)
       | right -> sch p t2 prop)
*)


(* 
 Definition of an INSERT predicate (a la  Prolog)
***************************************************

We begin with the definition of a predicate:

(INSERT n t t') if t' is a binary search tree containing exactly
  n and the elements of t *)

Inductive INSERT (n : Z) (t t' : Z_btree) : Prop :=
    insert_intro :
      (forall p : Z, occ p t -> occ p t') ->
      occ n t' ->
      (forall p : Z, occ p t' -> occ p t \/ n = p) ->
      search t' -> INSERT n t t'.Definition insert_spec (n : Z) (t : Z_btree) :=
  search t -> {t' : Z_btree | INSERT n t t'}.

Lemma insert_leaf : forall n : Z, INSERT n Z_leaf (Z_bnode n Z_leaf Z_leaf).