| i→n(i) = m + 1, 0 < n→i(n) + i, n→i(m) < i, n→i(m) + 1 < i, 0 < i ⊦ i = 0 |
i→n(i0 -1) = m + 1, 0 < i0 -1, n→i(m) + 1 < i0 -1, n→i(m) < i0 -1, 0 < n→i(n) + i0 -1, ∀ m, n. i→n(i0) = m + 1 ∧ 0 < n→i(n) + i0 ∧ n→i(m) < i0 ∧ n→i(m) + 1 < i0 ∧ 0 < i0 → i0 = 0 ⊦ i0 -1 = 0
Used simplifier rules: rax-04: ⊦ 0 ≤ i → i→n(i + 1) = i→n(i) + 1;%i2i-pos: ⊦ 0 < i → n→i(i→n(i)) = i;%int generated by 0, +1, -1;;% ⊦ i +1 = i + 1; (s)% ⊦ (* j) = i0 + (* j0) ↔ j - j0 = i0; (s)%add-a: ⊦ i + j + i0 = (i + j) + i0; from specification int-basic2%add-c: ⊦ i + j = j + i; from specification int-basic2% ⊦ (* j) < i0 + (* j0) ↔ j - j0 < i0; (s)% ⊦ ~1 < i ↔ 0 ≤ i; (s)% ⊦ i < j + 1 ↔ i ≤ j; (s)% ⊦ i + j < i + i0 ↔ j < i0; (s)% ⊦ m + n = m + n0 ↔ n = n0; (s)%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic%c: ⊦ m + n = n + m; from specification nat-basic%forward-le-01: ⊦ i ≤ j ∧ 0 ≤ i → 0 ≤ j; (forward) from specification int-abs% ⊦ i ≠ j → (i ≤ j ↔ i < j); (s)% ⊦ ¬ i < i; (s)