| ⌜m0⌝ = leninv(nσ), n < nσ[m], ⌜m⌝ < # nσ, stutf(nσ) ⊦ ⌜n⌝ < leninv(nσ) |
⌜m0⌝ = leninv(nσ), n < nσ[m], ⌜m⌝ < # nσ, m0 < nσ[m], stutf(nσ), m0 ≤ n ⊦
Used simplifier rules: fle-01: ⊦ m ≤ n ∧ n < n0 → m < n0; (forward) from specification nat% ⊦ m < n ↔ ¬ n ≤ m; (ss)% ⊦ ⌜m⌝ < ⌜n⌝ ↔ m < n; (s)