| m < n, n * n ≤ m * m + m0, m0 ≤ 2 * m ⊦ |
m < n, m * m + m0 < (m + 1) * (m + 1), m0 ≤ 2 * m, n * n ≤ m * m + m0 ⊦
Used simplifier rules: dist: ⊦ m0 * (m + n) = m0 * m + m0 * n;%one: ⊦ m0 * 1 = m0;%mult-a: ⊦ m0 * m * n = (m0 * m) * n;%mult-c: ⊦ m * n = n * m;%two-02: ⊦ m + m = 2 * m;%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic%c: ⊦ m + n = n + m; from specification nat-basic% ⊦ m + n < m + n0 ↔ n < n0; (s)% ⊦ m < n + 1 ↔ ¬ n < m; (s)% ⊦ m ≤ n → (n < m ↔ false); (s) Used formulas: m * m + m0 < (m + 1) * (m + 1)