| # nσ = ∞, stutf(nσ), n ≤ nσ[m], ∀ m0. m < m0 → nσ[m0] = nσ[m] + 1, ∃ n1. m + 1 < n1 ∧ nσ[n1] = n ⊦ nσ[∞.n + 1] = n + 1 |
# nσ = ∞, m + 1 < n0, stutf(nσ), nσ[n0] ≤ nσ[m], ∀ m0. m < m0 → nσ[m0] = nσ[m] + 1 ⊦ nσ[∞.n + 1] = nσ[n0] + 1
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic