| ubi_fix_ecs#(N; INVALIDECS, WLARRAY) {while INVALIDECS ≠ [] do {/* (prepost-fix-ecs : invariant ∃ nx. INVALIDECS` = nx + INVALIDECS ∧ WLARRAY = (WLARRAY`).mapIndices(nx, λ wle. wle.ec:= N) ∧ valid-indices(WLARRAY, nx) ∧ ¬ dups(INVALIDECS`) wfbound # INVALIDECS) */; WLARRAY[INVALIDECS.head].ec := N; INVALIDECS := INVALIDECS.tail} } |