| # σσ = ∞, # σσ[0] = ⌜n⌝ , σσ[m0] = σσ[0] + ⌜nf to ii(m0)⌝ , ii(0) = 0, n1 < n, n0 < ii(m0 + 1), ii(m0) < ii(m0 + 1), n1 < ii(m0 + 1) + n, ⌜n1⌝ < #(σσ[0] + ⌜nf⌝ to n0 + n), mon(σσ), ii(m0) ≤ n0, ∀ m, n. m ≤ n → ii(m) ≤ ii(n), ∀ n. σσ[n + 1] = σσ[n] + ⌜lf(n)⌝ , ∀ n. ii(n + 1) = ii(n) + # lf(n) ∧ (nf from ii(n)) to # lf(n) = lf(n) ⊦ ii(m0 + 1) + n = 0, (σσ[0] + ⌜nf⌝ to n0 + n)[n1] = σσ[0][n1], ii(m0 + 1) = 0, n = 0, σσ = [], ∃ n. # σσ[n] = ∞ |
# σσ[0] = ⌜n⌝ , # σσ = ∞, σσ[m0] = σσ[0] + ⌜nf to ii(m0)⌝ , ii(0) = 0, n1 < ii(m0 + 1) + n, ii(m0) < ii(m0 + 1), n0 < ii(m0 + 1), n1 < n, mon(σσ), ii(m0) ≤ n0, ∀ n. ii(n + 1) = ii(n) + # lf(n) ∧ (nf from ii(n)) to # lf(n) = lf(n), ∀ n. σσ[n + 1] = σσ[n] + ⌜lf(n)⌝ , ∀ m, n. m ≤ n → ii(m) ≤ ii(n) ⊦ ii(m0 + 1) + n = 0, (σσ[0] + ⌜nf⌝ )[n1] = σσ[0][n1], ii(m0 + 1) = 0, n = 0, σσ = [], ∃ n. # σσ[n] = ∞
Used simplifier rules: ⊦ m < n → ⌜m⌝ < ⌜n⌝ + n∞0; (s)%¬ # σ < ⌜n⌝ ⊦ #(σ to n) = ⌜n⌝ ; (s)%m < n, ¬ # σ < ⌜n⌝ ⊦ (σ to n)[m] = σ[m]; (s)% ⊦ ¬ m + n < m; (s)%fle-01: ⊦ m ≤ n ∧ n < n0 → m < n0; (forward) from specification nat% ⊦ m < n ↔ ¬ n ≤ m; (ss)% ⊦ ¬ ∞ < n∞; (s)%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ ⌜m + n⌝ = ⌜m⌝ + ⌜n⌝ ; (s)%append-assoc: ⊦ (σ + σ1) + σ2 = σ + σ1 + σ2; from specification stream%add-comm: ⊦ n∞1 + n∞2 = n∞2 + n∞1; from specification nat-inf%add-assoc: ⊦ (n∞ + n∞1) + n∞2 = n∞ + n∞1 + n∞2; from specification nat-inf% ⊦ n∞ + ∞ = ∞; (s)% ⊦ # ⌜nf⌝ = ∞; (s)% ⊦ #(σ + σ1) = # σ + # σ1; (s)