| nσ[n0] = n + 1, leninv(nσ) = ⌜n1⌝ , max∞(λ n0. ⌜n0⌝ < # nσ ∧ nσ[n0] = n) = ⌜n2⌝ , 1 + n < n1, ⌜n0⌝ < # nσ, stutf(nσ), n0 ≤ n2, ∀ m. ⌜m⌝ < # nσ ∧ nσ[m] = n + 1 → ¬ n0 < m ⊦ |
nσ[n0] = n + 1, leninv(nσ) = ⌜n1⌝ , max∞(λ n0. ⌜n0⌝ < # nσ ∧ nσ[n0] = n) = ⌜n2⌝ , n + 1 < n1, 1 + n < n1, ⌜n0⌝ < # nσ, stutf(nσ), n0 ≤ n2, ∀ m. ⌜m⌝ < # nσ ∧ nσ[m] = n + 1 → ¬ n0 < m ⊦
Used simplifier rules: lf-02: ⊦ m < n ∧ m = n0 → n0 < n; (forward) from specification nat-basic%c: ⊦ m + n = n + m; from specification nat-basic