| ⊦ id○(ar0, ar1, n) → (¬ id○(ar1, ar0, n) ↔ false) |
# ar0 = # ar1, m < # ar1, ∀ m. m < # ar1 ∧ m ≠ n → ar0[m] = ar1[m] ⊦ # ar1 = 0, m = n, ar1[m] = ar0[m]
Used simplifier rules: Idexcept: ⊦ id○(ar0, ar1, n) ↔ ¬ ¬(# ar0 = # ar1 ∧ (∀ m. m < # ar0 ∧ m ≠ n → ar0[m] = ar1[m]));%lf-01: ⊦ m < n ∧ n = n0 → m < n0; (forward) from specification nat-basic1%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic1