| n0 +1 ≤ # wlar, ∀ wlar, m, wle. n0 ≤ # wlar → ecs(wlar[m, wle], n0) = (m < n0 ⊃ (ecs(wlar, n0) -- wlar[m].ec) ++ wle.ec;ecs(wlar, n0)) ⊦ ecs(wlar[m, wle], n0 +1) = (m < n0 +1 ⊃ (ecs(wlar, n0 +1) -- wlar[m].ec) ++ wle.ec;ecs(wlar, n0 +1)) |
n0 < # wlar, ∀ wlar, m, wle. n0 ≤ # wlar → ecs(wlar[m, wle], n0) = (m < n0 ⊃ (ecs(wlar, n0) -- wlar[m].ec) ++ wle.ec;ecs(wlar, n0)) ⊦ ecs(wlar[m, wle], n0 + 1) = (¬ n0 < m ⊃ (wlar[n0].ec = wlar[m].ec ⊃ ecs(wlar, n0);(ecs(wlar, n0) -- wlar[m].ec) ++ wlar[n0].ec) ++ wle.ec;ecs(wlar, n0) ++ wlar[n0].ec)
Used simplifier rules: ecs-n-rec: ⊦ n < # wlar → ecs(wlar, n + 1) = ecs(wlar, n) ++ wlar[n].ec;% ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic% ⊦ (bag0 ++ n) -- n0 = (n = n0 ⊃ bag0;(bag0 -- n0) ++ n); (s)% ⊦ m + 1 ≤ n ↔ m < n; (s)%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ m < n + 1 ↔ ¬ n < m; (s)% ⊦ m +1 = m + 1; (s)