| count(a, bag1) = 0, count(a0, bag0 ++ a) = n0 + count(a0, bag1), count(a0, bag1) ≤ count(a0, bag0 ++ a) ⊦ n0 = count(a0, (bag0 \ bag1) ++ a) |
count(a, bag1) = 0, count(a0, bag0 ++ a) = n0 + count(a0, bag1) ⊦ n0 = count(a0, (bag0 \ bag1) ++ a)
Used simplifier rules: c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ m ≤ m + n; (s)