| m0 < (bag0 -- m).max, bag0.max ≤ m0, ∀ m. (bag0 -- m).max = bag0.max ∨ m = bag0.max ⊦ (m0 < (bag0 -- m).max ⊃ (bag0 -- m).max;m0) = m0, bag0 = ∅, bag0 = ∅ ++ m, m = m0 |
bag0.max < (bag0 -- m).max, m0 < (bag0 -- m).max, bag0.max ≤ m0, ∀ m. (bag0 -- m).max = bag0.max ∨ m = bag0.max ⊦ (bag0 -- m).max = m0, bag0 = ∅, bag0 = ∅ ++ m, m = m0
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%fle-01: ⊦ m ≤ n ∧ n < n0 → m < n0; (forward) from specification nat%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic