⊦ valid-indices(ar, nx) ↔ nx < # ar
⊦ nx0 + nx1 < # ar ↔ nx0 < # ar ∧ nx1 < # ar
Used simplifier rules: valid-indices: ⊦ valid-indices(ar, nx) ↔ nx < # ar;