| lf(0) = a ', ∀ n. n ≤ m0 → lf(n + 1) = nextl(jj(n), lf(n).last) ∧ jj(n + 1) = nextj(jj(n), lf(n).last) ⊦ (0 = m0 + 2 ⊃ nextl(jj(m0 + 1), lf(m0 + 1).last);lf(0)) = a ' ∧ (0 = m0 + 2 ⊃ nextj(jj(m0 + 1), lf(m0 + 1).last);jj(0)) = jj(0) ∧ (∀ n. n ≤ m0 + 1 → (n + 1 = m0 + 2 ⊃ nextl(jj(m0 + 1), lf(m0 + 1).last);lf(n + 1)) = nextl((n = m0 + 2 ⊃ nextj(jj(m0 + 1), lf(m0 + 1).last);jj(n)), (n = m0 + 2 ⊃ nextl(jj(m0 + 1), lf(m0 + 1).last);lf(n)).last) ∧ (n + 1 = m0 + 2 ⊃ nextj(jj(m0 + 1), lf(m0 + 1).last);jj(n + 1)) = nextj((n = m0 + 2 ⊃ nextj(jj(m0 + 1), lf(m0 + 1).last);jj(n)), (n = m0 + 2 ⊃ nextl(jj(m0 + 1), lf(m0 + 1).last);lf(n)).last)) |
lf(0) = a ', n ≤ m0 + 1, ∀ n. n ≤ m0 → lf(n + 1) = nextl(jj(n), lf(n).last) ∧ jj(n + 1) = nextj(jj(n), lf(n).last) ⊦ (n = m0 + 1 ⊃ nextl(jj(m0 + 1), lf(m0 + 1).last);lf(n + 1)) = nextl((n = m0 + 2 ⊃ nextj(jj(m0 + 1), lf(m0 + 1).last);jj(n)), (n = m0 + 2 ⊃ nextl(jj(m0 + 1), lf(m0 + 1).last);lf(n)).last) ∧ (n = m0 + 1 ⊃ nextj(jj(m0 + 1), lf(m0 + 1).last);jj(n + 1)) = nextj((n = m0 + 2 ⊃ nextj(jj(m0 + 1), lf(m0 + 1).last);jj(n)), (n = m0 + 2 ⊃ nextl(jj(m0 + 1), lf(m0 + 1).last);lf(n)).last)
Used simplifier rules: n < n0 ⊦ m + (* n) = m0 + (* n0) ↔ m = m0 + (n0 - n); (s)%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic%n < n0 ⊦ (* n) ≠ m0 + (* n0); (s)