| # nσ = ∞, nσ[m1] = m0 - 1, nσ[m] + 1 < m0, m1 < m2, stutf(nσ), ∀ m0. m < m0 → nσ[m0] = nσ[m] + 1 ⊦ nσ[m2] = m0 - 1 |
# nσ = ∞, nσ[m1] = m0 - 1, nσ[m] + 1 < m0, m1 < m2, stutf(nσ), ∀ m0. m < m0 → nσ[m0] = nσ[m] + 1 ⊦ nσ[m2] = m0 - 1
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic