enrich nat-array with
functions
max : array × nat × nat → nat;
axioms
max-in : ⊦ n < m ∧ m ≤ # ar → (∃ n0. n ≤ n0 ∧ n0 < m ∧ ar[n0] = max(ar, n, m));
max-gt : ⊦ n < m ∧ m ≤ # ar → (∀ n0. n ≤ n0 ∧ n0 < m → ar[n0] ≤ max(ar, n, m));
end enrich