| # ar = m + 1 ⊦ # ar = 0, ar = [], # ar = # copy(subarray(ar, 1, m), 0, mkarray(# subarray(ar, 1, m) + 1), 1, # subarray(ar, 1, m)) ∧ (n < # ar → ar[n] = copy(subarray(ar, 1, m), 0, mkarray(# subarray(ar, 1, m) + 1), 1, # subarray(ar, 1, m))[0, ar[0]][n]) |
# ar = m + 1, n ≤ m ⊦ ar[n] = copy(ar, 1, mkarray(m + 1), 1, m)[0, ar[0]][n], ar = []
Used simplifier rules: ⊦ m ≤ n → (n < m ↔ false); (s)% ⊦ m < n ↔ ¬ n ≤ m; (ss)% ⊦ m < n + 1 ↔ ¬ n < m; (s)% ⊦ m + 1 ≠ 0; (s)%lf-01: ⊦ m < n ∧ n = n0 → m < n0; (forward) from specification nat-basic%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic% ⊦ m < n → n ≠ 0; (s)% ⊦ # mkarray(n) = n; (s)% ⊦ # copy(ar, m, ar0, m0, n) = # ar0; (s)%n0 + n1 ≤ # ar0, m + m1 ≤ n1 ⊦ copy(subarray(ar0, n0, n1), m, ar1, m0, m1) = copy(ar0, n0 + m, ar1, m0, m1); (s)% ⊦ n + 0 = n; (s)%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ m ≤ m; (s)% ⊦ m + n ≤ m + n0 ↔ n ≤ n0; (s)% ⊦ # subarray(ar, m, n) = n; (s)