| # nσ = ∞, max∞(λ n0. ⌜n0⌝ < # nσ ∧ nσ[n0] = n) = ∞, ⌜∞.n⌝ + ⌜m⌝ + ⌜1⌝ < # nσ, stutf(nσ), (# nσ = ∞ ⊃ nσ[m1] = n ∧ (∀ m0. m1 < m0 → nσ[m0] = nσ[m1] + 1);nσ[(# nσ).n - 1] = n), ∀ n1. ¬ n1 < n0 → nσ[n1] = n ⊦ nσ[∞.n + m + 1] = n + 1 |
# nσ = ∞, max∞(λ n. nσ[n] = nσ[m1]) = ∞, stutf(nσ), ∀ m0. m1 < m0 → nσ[m0] = nσ[m1] + 1, ∀ n1. ¬ n1 < n0 → nσ[n1] = nσ[m1] ⊦ nσ[∞.n + m + 1] = nσ[m1] + 1
Used simplifier rules: add-comm: ⊦ n∞1 + n∞2 = n∞2 + n∞1; from specification nat-inf%add-assoc: ⊦ (n∞ + n∞1) + n∞2 = n∞ + n∞1 + n∞2; from specification nat-inf% ⊦ ⌜m⌝ ≠ ∞; (s)% ⊦ ⌜n⌝ + n∞1 = ∞ ↔ n∞1 = ∞; (s)% ⊦ n∞ < ∞ ↔ n∞ ≠ ∞; (s)% ⊦ ⌜m⌝ < ∞; (s)