| #(y0.butlast + y0.last ') = m + 1, y0 = y0.butlast + y0.last ', # y0.butlast ≤ m ⊦ y0.butlast + y0.last '[m - # y0.butlast, a] = firstn(m, y0.butlast + y0.last ') + a ', y0.butlast + y0.last ' = [] |
⊦ m ≤ # x → firstn(m, x + y) = firstn(m, x)
#(y0.butlast + y0.last ') = m + 1, y0 = y0.butlast + y0.last ', # y0.butlast ≤ m, m ≤ # y0.butlast ⊦ y0.butlast + y0.last ' = [], y0.butlast + y0.last '[m - # y0.butlast, a] = firstn(m, y0.butlast) + a '
Used simplifier rules: ⊦ #(x + y) = # x + # y; (s)% ⊦ # a ' = 0 +1; (s)%a: ⊦ (x + y) + z = x + y + z; from specification list% ⊦ m + n = m + n0 ↔ n = n0; (s)%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic%c: ⊦ m + n = n + m; from specification nat-basic% ⊦ x + a ' ≠ []; (s)% ⊦ m ≤ n → (n ≤ m ↔ m = n); (s)%x ≠ [] ⊦ x.butlast + x.last ' = x; (s) Used terms: y0.last ', y0.butlast, m