| n2 + n1 ≤ # lax0, # @(m, m0) ' ≤ n2 + 1, (n2 + 1) + n1 ≤ # @(m, m0) ' + # lax0, ∀ n0, n1, n. n0 + n1 ≤ # lax0 → sublist(n0, n1, lax0.to-adr(n)) = sublist(n0, n1, lax0).to-adr(n) ⊦ sublist(n2, n1, lax0.to-adr(n)) = sublist(n2 + 1 - # @(m, m0) ', n1, lax0).to-adr(n) |
n2 + n1 ≤ # lax0, ∀ n0, n1, n. n0 + n1 ≤ # lax0 → sublist(n0, n1, lax0.to-adr(n)) = sublist(n0, n1, lax0).to-adr(n) ⊦ sublist(n2, n1, lax0.to-adr(n)) = sublist(n2, n1, lax0).to-adr(n)
Used simplifier rules: ⊦ m ≤ m + n; (s)% ⊦ n ≤ n0 ∧ n1 ≤ m → n + n1 ≤ n0 + m; (s)%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ n + 0 = n; (s)% ⊦ n ≤ m → m + n0 - n = (m - n) + n0; (s)% ⊦ # ladr ' = 0 +1; (s)