| #oc(a, x0) = 1 + # x0, ∀ a. #oc(a, x0) = # x0 ↔ x0 = mklist(a, # x0) ⊦ a = a0, # x0 < #oc(a, x0) |
Used simplifier rules: ⊦ m < n + 1 ↔ ¬ n < m; (s)% ⊦ ¬ n < n; (s)%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic%c: ⊦ m + n = n + m; from specification nat-basic