| max(a0 ' + x0) < a, ∀ a. max(x0) < a → ins≤(a, x0).last = a ⊦ ins≤(a, a0 ' + x0).last = a |
⊦ x ≠ [] → max(a ' + x) = (max(x) < a ⊃ a;max(x))
(max(x0) < a0 ⊃ a0;max(x0)) < a, ∀ a. max(x0) < a → ins≤(a, x0).last = a ⊦ ins≤(a, a0 ' + x0).last = a, x0 = []
Used simplifier rules: max-base: ⊦ max(a ') = a;% ⊦ x + [] = x; (s)%a: ⊦ (x + y) + z = x + y + z; from specification list% ⊦ b < a → ins≤(a, b ') = b ' + a '; (s)% ⊦ (x + a ').last = a; (s) Used terms: x0, a0