| n3 + n0 = m + 1, m < n, np(n0), np(n), ∀ n1, n2, np. n1 - n2 < n3 → np(n2) → (∃ n. np(n) ∧ (∀ n0. n < n0 → ¬ np(n0))) ∨ (∃ n0. n1 < n0 ∧ np(n0)) ⊦ n3 + n0 = 0, np(n3 + n0), ∃ n. np(n) ∧ (∀ n0. n < n0 → ¬ np(n0)), ∃ n1. n3 + n0 < n1 ∧ np(n1) |
n3 + n0 = m + 1, m < n, np(n), np(n0), ∀ n1, n2, np. n1 - n2 < n3 → np(n2) → (∃ n. np(n) ∧ (∀ n0. n < n0 → ¬ np(n0))) ∨ (∃ n0. n1 < n0 ∧ np(n0)) ⊦ np(m + 1), ∃ n1. m + 1 < n1 ∧ np(n1), ∃ n. np(n) ∧ (∀ n0. n < n0 → ¬ np(n0))
Used simplifier rules: ⊦ m + 1 ≤ n ↔ m < n; (s)% ⊦ m + 1 ≠ 0; (s)%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic%eqle-one: ⊦ m = n + 1 ∧ n < n0 → m ≤ n0; (forward) from specification nat