val N:ℕ; val M:ℕ; axiom notZero ⇔ N > 0; type int = ℤ[-N,N]; type elem = ℤ[-M,M]; type array = Array[N,elem]; proc maximumElement(a:array): elem { var m:elem; var i:int; m ≔ 0; i ≔ 0; while i < N do { if a[i] > m then m ≔ a[i]; i ≔ i+1; } return m; }