| # ar1 = # ar0 ∧ (∀ m. m < # ar1 ∧ m ≠ n → ar1[m] = ar0[m]) ⊦ # ar0 = # ar1 ∧ (∀ m. m < # ar0 ∧ m ≠ n → ar0[m] = ar1[m]) |
# ar1 = # ar0, m < # ar0, ∀ m. m < # ar0 ∧ m ≠ n → ar1[m] = ar0[m] ⊦ # ar0 = 0, m = n, ar0[m] = ar1[m]
Used simplifier rules: lf-01: ⊦ m < n ∧ n = n0 → m < n0; (forward) from specification nat-basic1%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic1