x0 + z = x1 + x2, # x2 < n, # x1 + n < # x0 ⊦ x0 = []
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic% ⊦ m ≤ n ↔ ¬ n < m; (ss)