pq_add proves
is_heap_except_up
ensures there is at most one violation at the parent
as we swap, we move the one violation from down to up
after swap, there might or might not be violation
Grandparent check
Extra Specification Summary
Implementation of remove:
Table of Content