| ∀ σ, n. (σ to m0 + n) from m0 = (σ from m0) to n ∨ # σ < ⌜m0⌝ + ⌜n⌝ , (tl(σ) to m0 + n) from m0 = (tl(σ) from m0) to n ∨ # tl(σ) < ⌜m0⌝ + ⌜n⌝ ⊦ (σ to (m0 + 1) + n) from m0 + 1 = (σ from m0 + 1) to n, # σ < (⌜m0⌝ + ⌜1⌝ ) + ⌜n⌝ |
⊦ σ ≠ [] → (a = hd(σ) ∧ σ0 = tl(σ) ↔ σ = a + σ0)
Used simplifier rules: size-empty: ⊦ # [] = ⌜0⌝ ;%cons-append: ⊦ a + σ = ⌜a '⌝ + σ;%to-succ-cons: ⊦ ⌜a '⌝ + σ to n + 1 = a + (σ to n);%append-assoc: ⊦ (σ + σ1) + σ2 = σ + σ1 + σ2;%from-succ-cons: ⊦ ⌜a '⌝ + σ from n + 1 = σ from n;%size-append: ⊦ #(σ + σ1) = # σ + # σ1;%size-fin: ⊦ # ⌜x⌝ = ⌜# x⌝ ;%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic%c: ⊦ m + n = n + m; from specification nat-basic% ⊦ # a ' = 0 +1; (s)% ⊦ ⌜n⌝ + n∞1 < ⌜n⌝ + n∞2 ↔ n∞1 < n∞2; (s)%add-assoc: ⊦ (n∞ + n∞1) + n∞2 = n∞ + n∞1 + n∞2; from specification nat-inf%add-comm: ⊦ n∞1 + n∞2 = n∞2 + n∞1; from specification nat-inf% ⊦ ⌜0⌝ < n∞ ↔ n∞ ≠ ⌜0⌝ ; (s)% ⊦ n < m → (⌜(* n)⌝ = ⌜(* m)⌝ + n∞2 ↔ false); (s) Used terms: σ, a, σ0