| 2 = count(A[m], mkbag(A, i)), A[m1] = A[m], A[m0] = A[m], m0 < # A, m < # A, m1 < # A, m0 < i, m < i, m1 < i, i ≤ # A, 2 ≤ count(A[m], mkbag(A, i)) ⊦ m = m1, m = m0, m0 = m1 |
2 = count(A[m], mkbag(A, i)), A[m1] = A[m], A[m0] = A[m], m0 < # A, m < # A, m1 < # A, m0 < i, m < i, m1 < i, i ≤ # A ⊦ m = m1, m = m0, m0 = m1
Used simplifier rules: not-zero: 0 < n ⊦ (* n) ≤ m → m ≠ 0; (forward) from specification nat