| ⌜n⌝ < # nσ, stutf(nσ), ∃ n0. leninv(nσ) = ⌜n0⌝ ∧ ⌜n0⌝ < ⌜nσ[n]⌝ ⊦ |
leninv(nσ) = ⌜n0⌝ , n0 < nσ[n], ⌜n⌝ < # nσ, stutf(nσ) ⊦
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic% ⊦ ⌜m⌝ < ⌜n⌝ ↔ m < n; (s)