| maxenc(m) * (maxenc(m) + 1) = 2 * n0, m - n0 ≤ maxenc(m) ⊦ (maxenc(m) * (1 + maxenc(m))) / 2 + (m - n0) = m |
maxenc(m) * (maxenc(m) + 1) = 2 * n0, m - n0 ≤ maxenc(m) ⊦ (2 * n0) / 2 + (m - n0) = m
Used simplifier rules: c: ⊦ m + n = n + m; from specification nat-basic