| a < a0, (a0 ' + y)[m] < a0, ordered<(a0 ' + y), m ≤ # y, ∀ m0, n0. m0 < n0 ∧ ¬ # y < n0 → (a0 ' + y)[m0] < (a0 ' + y)[n0] ⊦ a < (a0 ' + y)[m] |
m = m1 +1, (a0 ' + y)[m] < a0, a < a0, ordered<(a0 ' + y), m ≤ # y, ∀ m0, n0. m0 < n0 ∧ ¬ # y < n0 → (a0 ' + y)[m0] < (a0 ' + y)[n0] ⊦ a < (a0 ' + y)[m]
Used simplifier rules: nat freely generated by 0, +1;;% ⊦ 0 ≤ m; (s)% ⊦ (a ' + x)[0] = a; (s)%a: ⊦ (x + y) + z = x + y + z; from specification list% ⊦ ¬ a < a; (s)