| # nσ = ∞, nσ[n] = n2 + 1, stutf(nσ), ∀ n. nσ[n] ≠ (n2 + 1) + 1, ∃ m0. n < m0 ∧ nσ[n] < nσ[m0], ∀ n0, nσ. n0 < n2 +1 → # nσ = ∞ ∧ stutf(nσ) ∧ (∀ n1. nσ[n1] ≠ n0 + 1) ∧ (∀ m. ∃ m0. m < m0 ∧ nσ[m] < nσ[m0]) → false ⊦ |
# nσ = ∞, nσ[n] = n2 + 1, n2 + 1 < nσ[m], n < m, stutf(nσ), ∀ n. nσ[n] ≠ (n2 + 1) + 1, ∀ n0, nσ. n0 < n2 +1 → # nσ = ∞ ∧ stutf(nσ) ∧ (∀ n1. nσ[n1] ≠ n0 + 1) ∧ (∀ m. ∃ m0. m < m0 ∧ nσ[m] < nσ[m0]) → false ⊦
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%lf-02: ⊦ m < n ∧ m = n0 → n0 < n; (forward) from specification nat-basic%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic