| # nσ = ⌜m0⌝ + ⌜1⌝ , n < nσ[m0], ∞.n + m + 1 < max∞(λ n0. ¬ m0 < n0 ∧ nσ[n0] = n + 1).n, stutf(nσ), stutf(nσ) ∧ ⌜m0⌝ < # nσ ∧ n ≤ nσ[m0] → (∃ m1. m1 ≤ m0 ∧ nσ[m1] = n), (∀ n0. ∃ n1. n0 < n1 ∧ ¬ m0 < n1 ∧ nσ[n1] = n) ∨ (∀ n0. m0 < n0 ∨ nσ[n0] ≠ n) ⊦ nσ[∞.n + m + 1] = n + 1 |
# nσ = ⌜m0⌝ + ⌜1⌝ , ∞.n + m + 1 < max∞(λ n0. ¬ m0 < n0 ∧ nσ[n0] = nσ[m1] + 1).n, nσ[m1] < nσ[m0], stutf(nσ), m1 ≤ m0, (∀ n0. ∃ n1. n0 < n1 ∧ ¬ m0 < n1 ∧ nσ[n1] = nσ[m1]) ∨ (∀ n0. m0 < n0 ∨ nσ[n0] ≠ nσ[m1]) ⊦ nσ[∞.n + m + 1] = nσ[m1] + 1
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic%lf-02: ⊦ m < n ∧ m = n0 → n0 < n; (forward) from specification nat-basic% ⊦ m < n → m ≤ n; (s)%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ ¬ n < n; (s)% ⊦ m < n + 1 ↔ ¬ n < m; (s)% ⊦ n∞ = ⌜m⌝ + ⌜n0⌝ → (⌜n⌝ < n∞ ↔ n < m + n0); (s)%add-comm: ⊦ n∞1 + n∞2 = n∞2 + n∞1; from specification nat-inf%add-assoc: ⊦ (n∞ + n∞1) + n∞2 = n∞ + n∞1 + n∞2; from specification nat-inf