| n < # ar, n ≥ m ⊦ fill(ar, a, 0, m)[n] = ar[n] |
m < # ar, n < # ar, m ≤ n ⊦ fill(ar, a, 0, m)[n] = ar[n]
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic%fle-01: ⊦ m ≤ n ∧ n < n0 → m < n0; (forward) from specification nat% ⊦ n ≥ m ↔ m ≤ n; (s)