The postcondition of Reverse_Array was incorrectly expressed.

I noticed that in Reverse_Array the postcondition needed to reference A'Old. After the fix the postcondition is proved from the loop invariant.