| sum-of-differences(n, bag0 -- m) = sum-of-differences(n, bag0) - (n - m), m ∈ bag0 ⊦ (n - vtblpnum) + (sum-of-differences(n, bag0) - (n - m)) = (n - vtblpnum) + sum-of-differences(n, bag0) - (n - m), vtblpnum = m |
⊦ m ∈ bag → sum-of-differences(n, bag) ≥ n - m
Used simplifier rules: ⊦ n ≥ m ↔ m ≤ n; (s)% ⊦ n ≤ m → m + n0 - n = (m - n) + n0; (s)%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic%c: ⊦ m + n = n + m; from specification nat-basic% ⊦ m + n = m + n0 ↔ n = n0; (s) Used terms: m, bag0, n