| #(a0 + x0) < pos(a, a0 + x0), ∀ a. ¬ # x0 < pos(a, x0) ⊦ |
1 + # x0 < pos(a, a0 ' + x0), ∀ a. ¬ # x0 < pos(a, x0) ⊦
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic%a: ⊦ (x + y) + z = x + y + z; from specification list% ⊦ # a ' = 0 +1; (s)% ⊦ #(x + y) = # x + # y; (s)% ⊦ a + x = a ' + x; (s)