| ar0[n0] = ar1[n1], range=(ar0, n0 + 1, ar1, n1 + 1, m0), # ar1 ≤ m0 + n1, ∀ ar0, n0, ar1, n1. range=(ar0, n0, ar1, n1, m0) → n0 + m0 ≤ # ar0 ∧ n1 + m0 ≤ # ar1 ⊦ n0 + m0 < # ar0 ∧ n1 + m0 < # ar1 |
ar0[n0] = ar1[n1], range=(ar0, n0 + 1, ar1, n1 + 1, m0), # ar1 ≤ m0 + n1, ∀ ar0, n0, ar1, n1. range=(ar0, n0, ar1, n1, m0) → n0 + m0 ≤ # ar0 ∧ n1 + m0 ≤ # ar1 ⊦
Used simplifier rules: ⊦ m ≤ n → (n < m ↔ false); (s)%c: ⊦ m + n = n + m; from specification nat-basic