| 2 = 0 + count(A[m], mkbag(A, i0)), A[m1] = A[m], A[m0] = A[m], i0 < # A, m0 < # A, m < # A, m1 < # A, m0 ≤ i0, m ≤ i0, m1 ≤ i0, ∀ A, m, m1, m0. 2 = count(A[m], mkbag(A, i0)) ∧ A[m1] = A[m] ∧ A[m0] = A[m] ∧ m0 < # A ∧ m < # A ∧ m1 < # A ∧ m0 < i0 ∧ m < i0 ∧ m1 < i0 ∧ i0 ≤ # A → m = m1 ∨ m = m0 ∨ m0 = m1 ⊦ A[m] = A[i0], m = m1, m = m0, m0 = m1 |
2 = count(A[m], mkbag(A, i0)), A[m0] = A[m], A[m1] = A[m], m1 < # A, m < # A, m0 < # A, i0 < # A, m1 ≤ i0, m ≤ i0, m0 ≤ i0, ∀ A, m, m1, m0. 2 = count(A[m], mkbag(A, i0)) ∧ A[m1] = A[m] ∧ A[m0] = A[m] ∧ m0 < # A ∧ m < # A ∧ m1 < # A ∧ m0 < i0 ∧ m < i0 ∧ m1 < i0 ∧ i0 ≤ # A → m = m1 ∨ m = m0 ∨ m0 = m1 ⊦ A[m] = A[i0], m = m0, m = m1, m0 = m1
Used simplifier rules: c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ n + 0 = n; (s)