| m < n, n ≤ # ar ⊦ rev(ar, n)[m] = ar[# ar - m + 1] |
m < n, m < # ar, n ≤ # ar ⊦ rev(ar, n)[m] = ar[# ar - m + 1]
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%fle: ⊦ m < n ∧ n ≤ n0 → m < n0; (forward) from specification nat%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic