| # σσ = ∞, # σσ[0] = ⌜n⌝ , σσ[m0] = σσ[0] + ⌜nf to ii(m0)⌝ , ii(0) = 0, ⌜n2 + n⌝ < #(σσ[0] + ⌜nf⌝ to n0 + n), n2 < ii(m0 + 1), n0 < ii(m0 + 1), ii(m0) < ii(m0 + 1), mon(σσ), ii(m0) ≤ n0, ∀ m, n. m ≤ n → ii(m) ≤ ii(n), ∀ n. σσ[n + 1] = σσ[n] + ⌜lf(n)⌝ , ∀ n. ii(n + 1) = ii(n) + # lf(n) ∧ (nf from ii(n)) to # lf(n) = lf(n) ⊦ ii(m0 + 1) + n = 0, ((σσ[0] + ⌜nf⌝ to n0 + n) + ⌜(nf to ii(m0 + 1)) from n0⌝ )[n2 + n] = nf(n2), ii(m0 + 1) = 0, σσ = [], ∃ n. # σσ[n] = ∞ |
# σσ = ∞, # σσ[0] = ⌜n⌝ , σσ[m0] = σσ[0] + ⌜nf to ii(m0)⌝ , ii(0) = 0, n2 < n0, n2 < ii(m0 + 1), n0 < ii(m0 + 1), ii(m0) < ii(m0 + 1), n2 + 1 < ii(m0 + 1), mon(σσ), ii(m0) ≤ n0, ∀ m, n. m ≤ n → ii(m) ≤ ii(n), ∀ n. σσ[n + 1] = σσ[n] + ⌜lf(n)⌝ , ∀ n. ii(n + 1) = ii(n) + # lf(n) ∧ (nf from ii(n)) to # lf(n) = lf(n) ⊦ ii(m0 + 1) + n = 0, (σσ[0] + ⌜nf⌝ )[n2 + n] = nf(n2), ii(m0 + 1) = 0, n0 = 0, σσ = [], ∃ n. # σσ[n] = ∞
Used simplifier rules: ⊦ m +1 = m + 1; (s)%trans: ⊦ n < n0 ∧ n0 < n1 → n < n1; (forward) from specification nat-basic%lf: ⊦ m < n ∧ n < n0 → m +1 < n0; (forward) from specification nat-basic%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic%m < n, ¬ # σ < ⌜n⌝ ⊦ (σ to n)[m] = σ[m]; (s)% ⊦ m + n < m + n0 ↔ n < n0; (s)% ⊦ ⌜m⌝ < ⌜n⌝ ↔ m < n; (s)% ⊦ ⌜n⌝ + n∞1 < ⌜n⌝ + n∞2 ↔ n∞1 < n∞2; (s)%¬ # σ < ⌜n⌝ ⊦ #(σ to n) = ⌜n⌝ ; (s)% ⊦ ¬ ∞ < n∞; (s)%add-comm: ⊦ n∞1 + n∞2 = n∞2 + n∞1; from specification nat-inf%add-assoc: ⊦ (n∞ + n∞1) + n∞2 = n∞ + n∞1 + n∞2; from specification nat-inf% ⊦ n∞ + ∞ = ∞; (s)% ⊦ # ⌜nf⌝ = ∞; (s)% ⊦ #(σ + σ1) = # σ + # σ1; (s)%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ ⌜m + n⌝ = ⌜m⌝ + ⌜n⌝ ; (s)%append-assoc: ⊦ (σ + σ1) + σ2 = σ + σ1 + σ2; from specification stream% ⊦ ⌜m⌝ < # σ → (σ + σ1)[m] = σ[m]; (s)