| # nσ = ∞, nσ[n2] = nσ[n1] + 1, n2 = m1 + 1, ⌜nσ[n1]⌝ + ⌜1⌝ < leninv(nσ), n1 + m + 1 < n2, stutf(nσ), nσ[m1] ≤ nσ[n2], ∀ m. nσ[m] = nσ[n1] → ¬ n1 < m, ∀ m. nσ[m] = nσ[n2] → ¬ n2 < m, ∀ m. ∃ m0. m < m0 ∧ nσ[m] < nσ[m0], ∀ m. ∃ m0. m < nσ[m0], ∀ n. ∃ m. nσ[m] = n ⊦ nσ[n1 + m + 1] = nσ[n2], n2 = 0 |
# nσ = ∞, nσ[m1 + 1] = nσ[n1] + 1, n1 + m < m1, ⌜nσ[n1]⌝ + ⌜1⌝ < leninv(nσ), stutf(nσ), nσ[m1] ≤ nσ[n1] + 1, ∀ m. nσ[m] = nσ[n1] → ¬ n1 < m, ∀ m. nσ[m] = nσ[n1] + 1 → ¬ m1 + 1 < m, ∀ m. ∃ m0. m < m0 ∧ nσ[m] < nσ[m0], ∀ m. ∃ m0. m < nσ[m0], ∀ n. ∃ m. nσ[m] = n ⊦ nσ[n1 + m + 1] = nσ[n1] + 1
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic% ⊦ m + n < m + n0 ↔ n < n0; (s)%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ m + 1 ≠ 0; (s)