| lf(0) = a ', n ≤ m0 + 1, ∀ n. n ≤ m0 → lf(n + 1) = nextl(jj(n), lf(n).last) ∧ jj(n + 1) = nextj(jj(n), lf(n).last) ⊦ (n = m0 + 1 ⊃ nextl(jj(m0 + 1), lf(m0 + 1).last);lf(n + 1)) = nextl((n = m0 + 2 ⊃ nextj(jj(m0 + 1), lf(m0 + 1).last);jj(n)), (n = m0 + 2 ⊃ nextl(jj(m0 + 1), lf(m0 + 1).last);lf(n)).last) ∧ (n = m0 + 1 ⊃ nextj(jj(m0 + 1), lf(m0 + 1).last);jj(n + 1)) = nextj((n = m0 + 2 ⊃ nextj(jj(m0 + 1), lf(m0 + 1).last);jj(n)), (n = m0 + 2 ⊃ nextl(jj(m0 + 1), lf(m0 + 1).last);lf(n)).last) |
lf(0) = a ', n ≤ m0 + 1, ∀ n. n ≤ m0 → lf(n + 1) = nextl(jj(n), lf(n).last) ∧ jj(n + 1) = nextj(jj(n), lf(n).last) ⊦ n = m0 + 1, (n = m0 + 1 ⊃ nextl(jj(m0 + 1), lf(m0 + 1).last);lf(n + 1)) = nextl((n = m0 + 2 ⊃ nextj(jj(m0 + 1), lf(m0 + 1).last);jj(n)), (n = m0 + 2 ⊃ nextl(jj(m0 + 1), lf(m0 + 1).last);lf(n)).last) ∧ (n = m0 + 1 ⊃ nextj(jj(m0 + 1), lf(m0 + 1).last);jj(n + 1)) = nextj((n = m0 + 2 ⊃ nextj(jj(m0 + 1), lf(m0 + 1).last);jj(n)), (n = m0 + 2 ⊃ nextl(jj(m0 + 1), lf(m0 + 1).last);lf(n)).last)
Used simplifier rules: ⊦ m + n ≤ m + n0 ↔ n ≤ n0; (s)%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic%c: ⊦ m + n = n + m; from specification nat-basic% ⊦ m + n = m + n0 ↔ n = n0; (s) Used formulas: n = m0 + 1