| m + n < #(s0 ∪ s1), # s1 ≤ n, # s0 ≤ m, #(s0 ∪ s1) ≤ # s0 + # s1 ⊦ |
m + n < #(s0 ∪ s1), m + n < # s0 + # s1, #(s0 ∪ s1) ≤ # s0 + # s1, # s0 ≤ m, # s1 ≤ n ⊦
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic%fle: ⊦ m < n ∧ n ≤ n0 → m < n0; (forward) from specification nat