// RUN: %dafny /compile:0 "%s" > "%t" // RUN: %diff "%s.expect" "%t" function M1(f:map, i:int):bool function M2(f:map, i:int):bool { M1(map j | j in f :: f[j], i) } lemma L(f:map, i:int) requires i in f; requires M2(f, i); requires forall j:int, f:map :: M1(f, j) == (j in f && f[j]); { assert f[i]; }