| ar2[n2 + n3] = resize(ar0, (n1 + n4) + m1)[n1 + n3], n3 < n4, n3 < n4 + m1, # ar0 < (n1 + n4) + m0, # ar0 < (n1 + n4) + m1, n3 < m1, n3 < m0, n3 < n4 + m0, n1 + n3 < (n1 + n4) + m0, m1 ≤ m0, n + m0 ≤ # ar, n2 + m1 ≤ # ar2 ⊦ ar2[n2 + n3] = (# ar0 ≤ n1 + n3 ∧ n1 + n3 < (n1 + n4) + m0 ⊃ zero;ar0[n1 + n3]) |
ar2[n2 + n3] = resize(ar0, (n1 + n4) + m1)[n1 + n3], n3 < m0, n3 < m1, # ar0 < (n1 + n4) + m1, # ar0 < (n1 + n4) + m0, n3 < n4 + m1, n3 < n4, n3 < n4 + m0, n2 + m1 ≤ # ar2, n + m0 ≤ # ar, m1 ≤ m0 ⊦ ar2[n2 + n3] = (# ar0 ≤ n1 + n3 ⊃ zero;ar0[n1 + n3])
Used simplifier rules: ⊦ m + n < m + n0 ↔ n < n0; (s)% ⊦ m + m0 < n + n0 → (m + m0 < n + n0 ↔ true); (ss)%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic