| n < m, m ≤ # asar ⊦ asar[n] ⊆ union(asar, 0, m) |
n < m, n < # asar, m ≤ # asar ⊦ asar[n] ⊆ union(asar, 0, m)
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%fle: ⊦ m < n ∧ n ≤ n0 → m < n0; (forward) from specification nat%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic