| n < # ar, n ≤ m0, ∀ n, ar, a. n < m0 ∧ n < # ar → fill(ar, a, 0, m0)[n] = a ⊦ fill(ar, a, 0, m0)[n] = a, n = m0 |
n < m0, n < # ar, ∀ n, ar, a. n < m0 ∧ n < # ar → fill(ar, a, 0, m0)[n] = a ⊦ fill(ar, a, 0, m0)[n] = a, n = m0
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic% ⊦ m ≠ n → (m ≤ n ↔ m < n); (s)