| # nσ = ⌜n⌝ + ⌜1⌝ , nσ[n2] = nσ[n], leninv(nσ) = ⌜n1⌝ , nσ[n] < n1, stutf(nσ), ∀ m. ¬ n < m ∧ nσ[m] = nσ[n] → ¬ n2 < m ⊦ n2 = n, n < n2 |
# nσ = ⌜n⌝ + ⌜1⌝ , nσ[n2] = nσ[n], leninv(nσ) = ⌜n1⌝ , n2 < n, nσ[n] < n1, stutf(nσ), ∀ m. ¬ n < m ∧ nσ[m] = nσ[n] → ¬ n2 < m ⊦ n2 = n
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%lf-02: ⊦ m < n ∧ m = n0 → n0 < n; (forward) from specification nat-basic%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic% ⊦ m ≠ n → (m < n ↔ ¬ n < m); (ss)