* Complete implementation and proof of Swap_Range