| disj(asar, 0, m + 1) ⊦ ∀ n0, n1. n0 < m ∧ n1 < m ∧ n0 ≠ n1 → asar[0 + n0] ∩ asar[0 + n1] = ∅ |
n < m, n0 < m, disj(asar, 0, m + 1) ⊦ #(asar[n0] ∩ asar[n]) = 0, n0 = n, asar[n0] ∩ asar[n] = ∅
Used simplifier rules: size-zero: ⊦ # as ≠ 0 → as ≠ ∅; (forward) from specification set-basic[address-list-set]% ⊦ m < n → n ≠ 0; (s)%size-zero-01: ⊦ as ≠ ∅ → # as ≠ 0; (forward) from specification set-basic[address-list-set]%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ n + 0 = n; (s)