| m0 ≤ m1 + 1, m0 ≤ m1 → ii(m1) = ii(m0), ∀ m0, ii. m0 ≤ m1 ∧ (∀ n. ii(n) ≤ ii(n + 1)) ∧ (∀ m. ii(m) ≤ ii(m0)) → ii(m1) = ii(m0), ∀ n. ii(n) ≤ ii(n + 1), ∀ m. ii(m) ≤ ii(m0) ⊦ ii(m1 + 1) = ii(m0) |
ii(m1) = ii(m0), m0 ≤ m1 + 1, ∀ m. ii(m) ≤ ii(m0), ∀ n. ii(n) ≤ ii(n + 1), ∀ m0, ii. m0 ≤ m1 ∧ (∀ n. ii(n) ≤ ii(n + 1)) ∧ (∀ m. ii(m) ≤ ii(m0)) → ii(m1) = ii(m0) ⊦ ii(m1 + 1) = ii(m0)
Used simplifier rules: ⊦ m ≤ n ↔ ¬ n < m; (ss)% ⊦ m < n → (n ≤ m + 1 ↔ n = m + 1); (s)%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic%c: ⊦ m + n = n + m; from specification nat-basic