| ⌜m1⌝ + ⌜1⌝ + ⌜m⌝ < # nσ, ⌜m1⌝ + ⌜m⌝ < # nσ, nσ[(m1 + 1) + m] ≤ nσ[m], ∀ n. ⌜n⌝ + ⌜1⌝ < # nσ → nσ[n] < nσ[n + 1] ⊦ nσ[m1 + m] ≤ nσ[m] |
nσ[(m1 + 1) + m] < nσ[m1 + m], nσ[m] < nσ[m1 + m], ⌜m1⌝ + ⌜1⌝ + ⌜m⌝ < # nσ, ⌜m1⌝ + ⌜m⌝ < # nσ, nσ[(m1 + 1) + m] ≤ nσ[m], ∀ n. ⌜n⌝ + ⌜1⌝ < # nσ → nσ[n] < nσ[n + 1] ⊦
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%fle-01: ⊦ m ≤ n ∧ n < n0 → m < n0; (forward) from specification nat%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic% ⊦ m ≤ n ↔ ¬ n < m; (ss)