| n < m0, id○(avol1, avol0, n), m0 + m1 ≤ # avol1 ⊦ lebs(avol1, m0, m1) = lebs(avol0, m0, m1) |
# avol1 = # avol0, n < m0, id○(avol1, avol0, n), m0 + m1 ≤ # avol0 ⊦ lebs(avol1, m0, m1) = lebs(avol0, m0, m1)
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%idexcept-size: ⊦ id○(avol, avol0, n) → # avol = # avol0; (forward) from specification array-copy[avolume]%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic