| # nσ = ∞, m + 1 = nσ[n], nσ[m2] = m, ⌜n⌝ < # nσ, stutf(nσ), ∀ m1. m2 < m1 → nσ[m1] = nσ[m2] + 1 ⊦ # nσ = ∞ ∧ (n < m0 ∧ ⌜m0⌝ < # nσ → nσ[m0] = nσ[n]) |
# nσ = ∞, nσ[m2] + 1 = nσ[n], n < m0, stutf(nσ), ∀ m1. m2 < m1 → nσ[m1] = nσ[n] ⊦ nσ[m0] = nσ[n]
Used simplifier rules: ⊦ ⌜m⌝ < ∞; (s)% ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic