| # nσ = ⌜m0⌝ + ⌜1⌝ , min(nσ, nσ[m0] + 1) = m0 + 1, mon<(nσ), min(nσ, nσ[m0]) ≤ m0, nσ[m0] ≤ nσ[min(nσ, nσ[m0])], ∀ m. ¬ m0 < m ∧ nσ[m0] ≤ nσ[m] → min(nσ, nσ[m0]) ≤ m, ∀ m. m < min(nσ, nσ[m] + 1) → nσ[m] ≠ nσ[m0] ⊦ m0 + 1 = min(nσ, nσ[m0]), nσ = [] |
Used simplifier rules: ⊦ m < n ↔ ¬ n ≤ m; (ss)%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic%c: ⊦ m + n = n + m; from specification nat-basic% ⊦ m = n + 1 → ¬ m ≤ n; (s) Used terms: m0