| m < # ar, n < # ar, m ≤ n ⊦ fill(ar, a, 0, m)[n] = ar[n] |
⊦ n < # ar → fill(ar, a, m0, m1)[n] = (m0 ≤ n ∧ n < m0 + m1 ⊃ a;ar[n])
Used simplifier rules: ⊦ 0 ≤ m; (s)% ⊦ n + 0 = n; (s)%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic%c: ⊦ m + n = n + m; from specification nat-basic% ⊦ m ≤ n → (n < m ↔ false); (s) Used terms: n, m, 0, a, ar