| dups(x0) ↔ (∃ m, n. m < # x0 ∧ n < # x0 ∧ m ≠ n ∧ x0[m] = x0[n]), dups(x0) ⊦ a ∈ x0 ∨ dups(x0) ↔ (∃ m, n. ¬ # x0 < m ∧ ¬ # x0 < n ∧ m ≠ n ∧ (a ' + x0)[m] = (a ' + x0)[n]) |
x0[m] = x0[n], n < # x0, m < # x0, dups(x0) ⊦ m = n, x0 = [], ∃ m, n. ¬ # x0 < m ∧ ¬ # x0 < n ∧ m ≠ n ∧ (a ' + x0)[m] = (a ' + x0)[n]
Used simplifier rules: ⊦ # x = 0 ↔ x = []; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic