| nσ[(# nσ).n - 1] = n1, max∞(λ n0. ⌜n0⌝ < # nσ ∧ nσ[n0] = n).n + m + 1 < max∞(λ n0. ⌜n0⌝ < # nσ ∧ nσ[n0] = n + 1).n, n < n1, stutf(nσ) ⊦ # nσ = ∞, nσ[max∞(λ n0. ⌜n0⌝ < # nσ ∧ nσ[n0] = n).n + m + 1] = n + 1 |
max∞(λ n0. ⌜n0⌝ < # nσ ∧ nσ[n0] = n).n + m + 1 < max∞(λ n0. ⌜n0⌝ < # nσ ∧ nσ[n0] = n + 1).n, n < nσ[(# nσ).n - 1], stutf(nσ) ⊦ # nσ = ∞, nσ[max∞(λ n0. ⌜n0⌝ < # nσ ∧ nσ[n0] = n).n + m + 1] = n + 1
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic