| mon<(⌜nl⌝ ), ∀ nl0, np. # nl0 < # nl → mon<(⌜nl0⌝ ) → mon<(rem(⌜nl0⌝ , np)) ⊦ mon<(rem(⌜nl⌝ , np)), ∀ nl0, m. nl ≠ nl0 + m ' |
mon<(⌜nl0⌝ + ⌜m '⌝ ), ∀ nl1, np. # nl1 < #(nl0 + m ') → mon<(⌜nl1⌝ ) → mon<(rem(⌜nl1⌝ , np)) ⊦ mon<(rem(⌜nl0⌝ , np) + (np(# nl0) ⊃ [];⌜m '⌝ ))
Used simplifier rules: append-assoc: ⊦ (nσ + nσ0) + nσ1 = nσ + nσ0 + nσ1; from specification stream[natstream]% ⊦ rem(⌜nl⌝ + ⌜m '⌝ , np) = rem(⌜nl⌝ , np) + (np(# nl) ⊃ [];⌜m '⌝ ); (s)%a: ⊦ (nl + nl0) + nl1 = nl + nl0 + nl1; from specification list[natstream]% ⊦ ⌜nl + nl0⌝ = ⌜nl⌝ + ⌜nl0⌝ ; (s)