| n2 ≤ n1 ⊦ # subarray(fill(mkarray(n0 + n1), empty), n0, n2) = # fill(mkarray(n2), empty) ∧ (∀ n. n < # subarray(fill(mkarray(n0 + n1), empty), n0, n2) → subarray(fill(mkarray(n0 + n1), empty), n0, n2)[n] = fill(mkarray(n2), empty)[n]) |
n < n2, n < n1, n2 ≤ n1 ⊦ fill(mkarray(n0 + n1), empty)[n0 + n] = empty
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%fle: ⊦ m < n ∧ n ≤ n0 → m < n0; (forward) from specification nat%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic% ⊦ m < n → fill(mkarray(n), a)[m] = a; (s)% ⊦ n0 < n → subarray(ar, m, n)[n0] = ar[m + n0]; (s)% ⊦ # mkarray(n) = n; (s)% ⊦ # fill(ar, a) = # ar; (s)% ⊦ # subarray(ar, m, n) = n; (s)