| # nσ = ∞, nσ[n0] = n + 1, n0 < m, n + 1 < nσ[m], stutf(nσ), ∞.n ≤ max∞(λ n0. nσ[n0] = n).n, ∀ m. ∃ m0. m < m0 ∧ nσ[m] < nσ[m0], ∀ n0. ∃ n1. n0 < n1 ∧ nσ[n1] = n + 1, ∃ n1. m < n1 ∧ nσ[n1] = n + 1 ⊦ n0 = 0 |
# nσ = ∞, nσ[n0] = n + 1, nσ[n1] = n + 1, n0 < n1, n0 < m, n + 1 < nσ[m], m < n1, n0 + 1 < n1, stutf(nσ), ∞.n ≤ max∞(λ n0. nσ[n0] = n).n, ∀ m. ∃ m0. m < m0 ∧ nσ[m] < nσ[m0], ∀ n0. ∃ n1. n0 < n1 ∧ nσ[n1] = n + 1 ⊦ n0 = 0
Used simplifier rules: ⊦ m +1 = m + 1; (s)% ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic%lf-02: ⊦ m < n ∧ m = n0 → n0 < n; (forward) from specification nat-basic%trans: ⊦ n < n0 ∧ n0 < n1 → n < n1; (forward) from specification nat-basic%lf: ⊦ m < n ∧ n < n0 → m +1 < n0; (forward) from specification nat-basic