| n < # ar, ∀ n, ar, a, m0. n < # ar → fill(ar, a, m0, m)[n] = (m0 ≤ n ∧ n < m0 + m ⊃ a;ar[n]) ⊦ fill(ar, a, m0, m +1)[n] = (m0 ≤ n ∧ n < m0 + m +1 ⊃ a;ar[n]) |
n < # ar, ∀ n, ar, a, m0. n < # ar → fill(ar, a, m0, m)[n] = (m0 ≤ n ∧ n < m0 + m ⊃ a;ar[n]) ⊦ fill(ar, a, m0, m)[m0 + m, a][n] = (m0 ≤ n ∧ ¬ m0 + m < n ⊃ a;ar[n])
Used simplifier rules: Fill-succ: ⊦ fill(ar, a, m, n + 1) = fill(ar, a, m, n)[m + n, a];% ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic% ⊦ m < n + 1 ↔ ¬ n < m; (s)%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ m +1 = m + 1; (s)