| m0 +1 < # kar, m0 +1 < # keyset(kar, m0 +1), ∀ kar. ¬(m0 < # keyset(kar, m0) ∧ m0 < # kar) ⊦ |
m0 + 1 < # kar, m0 + 1 < # keyset(kar, m0 + 1), ∀ kar0. ¬ m0 < # keyset(kar0, m0) ∨ ¬ m0 < # kar0 ⊦
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic% ⊦ m +1 = m + 1; (s)