| id○(ar0, ar1, n), id○(ar1, ar2, n) ⊦ id○(ar0, ar2, n) |
# ar1 = # ar2, # ar0 = # ar2, m < # ar2, ∀ m. m < # ar2 ∧ m ≠ n → ar1[m] = ar2[m], ∀ m. m < # ar2 ∧ m ≠ n → ar0[m] = ar1[m] ⊦ ar0[m] = ar2[m], m = n
Used simplifier rules: Idexcept: ⊦ id○(ar0, ar1, n) ↔ # ar0 = # ar1 ∧ (∀ m. m < # ar0 ∧ m ≠ n → ar0[m] = ar1[m]);% ⊦ m < n → n ≠ 0; (s)%lf-01: ⊦ m < n ∧ n = n0 → m < n0; (forward) from specification nat-basic%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic