| ⊦ n ≥ m ∧ n < # ar → fill(ar, a, 0, m)[n] = ar[n] |
n < # ar, m ≤ n, m < # ar ⊦ fill(ar, a, 0, m)[n] = ar[n], # ar = 0
Used simplifier rules: f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic1%fle-01: ⊦ m ≤ n ∧ n < n0 → m < n0; (forward) from specification nat%ge: ⊦ n ≥ m ↔ m ≤ n; from specification nat