| # (σ to ii(n0 + 1)).l = # lf(n0 + 1), # σ = ⌜ii(n)⌝ , ii(0) = 0, lf(n0 + 1) = lf(n0) + nextnli0(lf(n0), n0), lf(0) = [], lf(n0) = (σ to ii(n0)).l, finp(σ), ∀ x, n. nextnli(x, n) = x + nextnli0(x, n), ∀ n. lf(n + 1) = nextnli(lf(n), n), ∀ m, n. m ≤ n → ii(m) ≤ ii(n), ∀ n. ii(n + 1) = ii(n) + # nextnli0(lf(n), n) ∧ ¬ # σ < ⌜ii(n + 1)⌝ ∧ (σ from ii(n)) to # nextnli0(lf(n), n) = ⌜nextnli0(lf(n), n)⌝ , ∀ n0. lf(n0) = (σ to ii(n0)).l, ∀ n. n < # lf(n0 + 1) → (σ to ii(n0 + 1)).l[n] = lf(n0 + 1)[n], ∀ m. n ≤ m → nextnli0(lf(m), m) = [] ∧ ii(m) = ii(n) ⊦ #(σ to ii(n0 + 1)) = ⌜# lf(n0 + 1)⌝ ∧ (⌜n1⌝ < #(σ to ii(n0 + 1)) → (σ to ii(n0 + 1))[n1] = lf(n0 + 1)[n1]) |
#(x to ii(n0 + 1)) = # lf(n0 + 1), # x = ii(n), ii(0) = 0, lf(n0 + 1) = lf(n0) + nextnli0(lf(n0), n0), lf(0) = [], lf(n0) = x to ii(n0), n1 < # lf(n0 + 1), ∀ n2. ii(n2 + 1) = ii(n2) + # nextnli0(lf(n2), n2) ∧ ¬ ii(n) < ii(n2 + 1) ∧ (x from ii(n2)) to # nextnli0(lf(n2), n2) = nextnli0(lf(n2), n2), ∀ n2. lf(n2) = x to ii(n2), ∀ n2. n2 < # lf(n0 + 1) → (x to ii(n0 + 1))[n2] = lf(n0 + 1)[n2], ∀ x, n. nextnli(x, n) = x + nextnli0(x, n), ∀ n. lf(n + 1) = nextnli(lf(n), n), ∀ m, n. m ≤ n → ii(m) ≤ ii(n), ∀ m. n ≤ m → nextnli0(lf(m), m) = [] ∧ ii(m) = ii(n) ⊦ (x to ii(n0 + 1))[n1] = lf(n0 + 1)[n1], lf(n0 + 1) = []
Used simplifier rules: ⊦ # x = 0 ↔ x = []; (s)%lf-01: ⊦ m < n ∧ n = n0 → m < n0; (forward) from specification nat-basic%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic% ⊦ ⌜x⌝ [n] = x[n]; (s)% ⊦ ⌜x⌝ = ⌜x0⌝ ↔ x = x0; (s)% ⊦ ⌜x⌝ from n = ⌜x from n⌝ ; (s)% ⊦ ⌜m⌝ < ⌜n⌝ ↔ m < n; (s)% ⊦ finp(⌜x⌝ ); (s)% ⊦ ⌜m⌝ = ⌜m0⌝ ↔ m = m0; (s)% ⊦ # ⌜x⌝ = ⌜# x⌝ ; (s)% ⊦ ⌜x⌝ .l = x; (s)% ⊦ ⌜x⌝ to n = ⌜x to n⌝ ; (s)%stream-fin-forward: ⊦ finp(σ) → (∃ x. ⌜x⌝ = σ); (forward) from specification stream-basic