| ⊦ sort(x + ins≤(a, y)) = ins≤(a, sort(x + y)), perm(x + ins≤(a, y), ins≤(a, sort(x + y))), perm(x + ins≤(a, y), a ' + sort(x + y)), a ∈ x + ins≤(a, y) ∧ perm(sort(x + y), (x + ins≤(a, y)) -1l a) |
Used simplifier rules: perm: ⊦ perm(sort(x), y) ↔ perm(x, y);% ⊦ perm(x, x); (s)% ⊦ perm(x + y, x + z) ↔ perm(y, z); (s)% ⊦ perm((x + ins≤(a, y)) -1l a, z) ↔ perm(x + y, z); (s)%sym-02: ⊦ ¬ perm(x, y) → ¬ perm(y, x); (forward) from specification list-perm%a: ⊦ (x + y) + z = x + y + z; from specification list% ⊦ a ∈ ins≤(a, x); (s)% ⊦ a ∈ x + y ↔ a ∈ x ∨ a ∈ y; (s)