| # nσ = ∞, ⌜n⌝ < leninv(nσ), stutf(nσ) ⊦ nσ[inv(nσ)[n] + 1] = n + 1 |
⊦ stutf(nσ) ∧ ⌜n⌝ < leninv(nσ) ∧ ⌜inv(nσ)[n]⌝ + ⌜1⌝ < # nσ → nσ[inv(nσ)[n] + 1] = n + 1
Used simplifier rules: ⊦ n∞ < ∞ ↔ n∞ ≠ ∞; (s)% ⊦ ⌜n⌝ + n∞1 = ∞ ↔ n∞1 = ∞; (s)% ⊦ ⌜m⌝ ≠ ∞; (s)%add-assoc: ⊦ (n∞ + n∞1) + n∞2 = n∞ + n∞1 + n∞2; from specification nat-inf%add-comm: ⊦ n∞1 + n∞2 = n∞2 + n∞1; from specification nat-inf Used terms: n, nσ