let rec merge_signature ts1 ts2 =
match ts1,ts2 with
| [],ts | ts,[] -> ts
| t1::ts1 , t2::ts2 ->
if compare_tau t1 t2 <> 0 then
failwith "merge incompatible index during havoc" ;
t1 :: merge_signature ts1 ts2