| lf(0) = a ', n ≤ m0 + 1, ∀ n. n ≤ m0 → lf(n + 1) = nextl(jj(n), lf(n).last) ∧ jj(n + 1) = nextj(jj(n), lf(n).last) ⊦ n = m0 + 1, (n = m0 + 1 ⊃ nextl(jj(m0 + 1), lf(m0 + 1).last);lf(n + 1)) = nextl((n = m0 + 2 ⊃ nextj(jj(m0 + 1), lf(m0 + 1).last);jj(n)), (n = m0 + 2 ⊃ nextl(jj(m0 + 1), lf(m0 + 1).last);lf(n)).last) ∧ (n = m0 + 1 ⊃ nextj(jj(m0 + 1), lf(m0 + 1).last);jj(n + 1)) = nextj((n = m0 + 2 ⊃ nextj(jj(m0 + 1), lf(m0 + 1).last);jj(n)), (n = m0 + 2 ⊃ nextl(jj(m0 + 1), lf(m0 + 1).last);lf(n)).last) |
lf(0) = a ', n ≤ m0, ∀ n. n ≤ m0 → lf(n + 1) = nextl(jj(n), lf(n).last) ∧ jj(n + 1) = nextj(jj(n), lf(n).last) ⊦ n = m0 + 1, lf(n + 1) = nextl((n = m0 + 2 ⊃ nextj(jj(m0 + 1), lf(m0 + 1).last);jj(n)), (n = m0 + 2 ⊃ nextl(jj(m0 + 1), lf(m0 + 1).last);lf(n)).last) ∧ jj(n + 1) = nextj((n = m0 + 2 ⊃ nextj(jj(m0 + 1), lf(m0 + 1).last);jj(n)), (n = m0 + 2 ⊃ nextl(jj(m0 + 1), lf(m0 + 1).last);lf(n)).last)
Used simplifier rules: ⊦ m < n ↔ ¬ n ≤ m; (ss)%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ m < n + 1 ↔ ¬ n < m; (s)% ⊦ m ≠ n → (m ≤ n ↔ m < n); (s)