| # nσ = ∞, nσ[m1] = n1, max∞(λ n0. ⌜n0⌝ < # nσ ∧ nσ[n0] = n).n + m + 1 < max∞(λ n0. ⌜n0⌝ < # nσ ∧ nσ[n0] = n + 1).n, n < n1, stutf(nσ), ∀ m0. m1 < m0 → nσ[m0] = nσ[m1] + 1 ⊦ nσ[max∞(λ n0. ⌜n0⌝ < # nσ ∧ nσ[n0] = n).n + m + 1] = n + 1 |
# nσ = ∞, max∞(λ n0. nσ[n0] = n).n + m + 1 < max∞(λ n0. nσ[n0] = n + 1).n, n < nσ[m1], stutf(nσ), ∀ m0. m1 < m0 → nσ[m0] = nσ[m1] + 1 ⊦ nσ[max∞(λ n0. nσ[n0] = n).n + m + 1] = n + 1
Used simplifier rules: a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ m < n → n ≠ 0; (s)% ⊦ ⌜m⌝ < ∞; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic