| n2 < m, n1 + n2 < n, n1 + m ≤ # ar1, n0 + m ≤ # ar0, n ≤ # ar1, m + n1 ≤ n, m + n1 ≤ # ar1, ∀ n. n < m → ar0[n0 + n] = ar1[n1 + n] ⊦ ar0[n0 + n2] = (# ar1 ≤ n1 + n2 ∧ n1 + n2 < n ⊃ zero;ar1[n1 + n2]) |
n1 + n2 < n, n2 < m, n1 + n2 < # ar1, m + n1 ≤ # ar1, m + n1 ≤ n, n ≤ # ar1, n0 + m ≤ # ar0, n1 + m ≤ # ar1, ∀ n. n < m → ar0[n0 + n] = ar1[n1 + n] ⊦ ar0[n0 + n2] = ar1[n1 + n2]
Used simplifier rules: ⊦ m < n → (n ≤ m ↔ false); (s)% ⊦ m < n → n ≠ 0; (s)%fle: ⊦ m < n ∧ n ≤ n0 → m < n0; (forward) from specification nat%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic