| m + len < scan(key, zbrar, m, len) ⊦ |
m + len0 +1 < scan(key, zbrar, m, len0 +1), ∀ m, key, zbrar. ¬ m + len0 < scan(key, zbrar, m, len0) ⊦
Used simplifier rules: scan-base: ⊦ scan(key, zbrar, m, 0) = m;%nat freely generated by 0, +1;;% ⊦ n + 0 = n; (s)%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic%c: ⊦ m + n = n + m; from specification nat-basic% ⊦ ¬ n < n; (s)