| 2 = 1 + count(A[m], mkbag(A, i0)), A[m1] = A[m], A[m0] = A[m], A[m] = A[i0], i0 < # A, m0 < # A, m < # A, m1 < # A, m0 ≤ i0, m ≤ i0, m1 ≤ i0, ∀ A, m, m1, m0. 2 = count(A[m], mkbag(A, i0)) ∧ A[m1] = A[m] ∧ A[m0] = A[m] ∧ m0 < # A ∧ m < # A ∧ m1 < # A ∧ m0 < i0 ∧ m < i0 ∧ m1 < i0 ∧ i0 ≤ # A → m = m1 ∨ m = m0 ∨ m0 = m1 ⊦ m = m1, m = m0, m0 = m1 |
1 = count(A[i0], mkbag(A, i0)), A[m] = A[i0], A[m0] = A[i0], A[m1] = A[i0], m1 < # A, m < # A, m0 < # A, i0 < # A, m1 ≤ i0, m ≤ i0, m0 ≤ i0, ∀ A, m, m1, m0. 2 = count(A[m], mkbag(A, i0)) ∧ A[m1] = A[m] ∧ A[m0] = A[m] ∧ m0 < # A ∧ m < # A ∧ m1 < # A ∧ m0 < i0 ∧ m < i0 ∧ m1 < i0 ∧ i0 ≤ # A → m = m1 ∨ m = m0 ∨ m0 = m1 ⊦ m = m0, m = m1, m0 = m1
Used simplifier rules: c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic%n0 < n ⊦ (* n) = m0 + (* n0) ↔ n - n0 = m0; (s)