| n = m + 1, ⌜n⌝ < ⌜1⌝ + # σ0 ⊦ ⌜a '⌝ + σ0 = [], n = 0, σ0 to n = (σ0 to m) + ⌜(⌜a '⌝ + σ0)[n] '⌝ |
⌜m⌝ < # σ0 ⊦ ⌜a '⌝ + σ0 = [], σ0 to m + 1 = (σ0 to m) + ⌜σ0[m] '⌝
Used simplifier rules: get-cons-succ: ⊦ (⌜a '⌝ + σ)[n + 1] = σ[n];%append-assoc: ⊦ (σ + σ1) + σ2 = σ + σ1 + σ2;%add-comm: ⊦ n∞1 + n∞2 = n∞2 + n∞1; from specification nat-inf%add-assoc: ⊦ (n∞ + n∞1) + n∞2 = n∞ + n∞1 + n∞2; from specification nat-inf% ⊦ ⌜n⌝ + n∞1 < ⌜n⌝ + n∞2 ↔ n∞1 < n∞2; (s)% ⊦ ⌜m + n⌝ = ⌜m⌝ + ⌜n⌝ ; (s)% ⊦ m + 1 ≠ 0; (s)%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic