| # avol = # avol0, n1 < m0, n0 < n, n + m + m0 ≤ # avol0, ∀ m. m < # avol0 ∧ m ≠ n0 → avol[m] = avol0[m] ⊦ avol[(n + m) + n1] = avol0[(n + m) + n1] |
Used simplifier rules: ⊦ m < n ↔ ¬ n ≤ m; (ss)%let: ⊦ n ≤ n0 ∧ n0 ≤ n1 → n ≤ n1; (forward) from specification nat% ⊦ m + n ≤ m + n0 ↔ n ≤ n0; (s)% ⊦ m < n → (n ≤ m ↔ false); (s)%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic%c: ⊦ m + n = n + m; from specification nat-basic% ⊦ ¬ m + n < m; (s) Used terms: (n + m) + n1