| # nσ = ∞, n < m, nσ[n] < nσ[m], stutf(nσ), stutf(nσ) ∧ ⌜m⌝ < # nσ ∧ nσ[n] + 1 ≤ nσ[m] → (∃ m0. m0 ≤ m ∧ nσ[m0] = nσ[n] + 1), ∀ n1. nσ[n1] ≠ nσ[n] + 1 ⊦ |
# nσ = ∞, nσ[m0] = nσ[n] + 1, n < m, nσ[n] < nσ[m], stutf(nσ), m0 ≤ m, nσ[m0] ≤ nσ[m], ∀ n1. nσ[n1] ≠ nσ[m0] ⊦
Used simplifier rules: eqle-one: ⊦ m = n + 1 ∧ n < n0 → m ≤ n0; (forward) from specification nat% ⊦ ⌜m⌝ < ∞; (s)%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ m + 1 ≤ n ↔ m < n; (s)