| n0 ≤ # apebs, n0 ≤ n +1, n +1 ≤ # apebs, ∀ apebs, n0, v, m. n ≤ # apebs ∧ n0 ≤ n ∧ n0 ≤ # apebs → valid-sqns(v, m, apebs, n0) ⊆ valid-sqns(v, m, apebs, n) ⊦ valid-sqns(v, m, apebs, n0) ⊆ valid-sqns(v, m, apebs, n +1) |
n < # apebs, n0 ≤ n + 1, n0 ≤ # apebs, ∀ apebs, n0, v, m. n ≤ # apebs ∧ n0 ≤ n ∧ n0 ≤ # apebs → valid-sqns(v, m, apebs, n0) ⊆ valid-sqns(v, m, apebs, n) ⊦ valid-sqns(v, m, apebs, n0) ⊆ valid-sqns(v, m, apebs, n) ∪ (valid-peb(v, m, apebs[n]) ⊃ {apebs[n].vidhdr.sqn} ;∅)
Used simplifier rules: valid-sqns-rec: ⊦ n < # apebs → valid-sqns(v, m, apebs, n + 1) = valid-sqns(v, m, apebs, n) ∪ (valid-peb(v, m, apebs[n]) ⊃ {apebs[n].vidhdr.sqn} ;∅);% ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ m + 1 ≤ n ↔ m < n; (s)% ⊦ m +1 = m + 1; (s)