| ⌜m⌝ < # nσ, n < nσ[m], stutf(nσ) ⊦ ∃ m0. m0 < m ∧ nσ[m0] = n ∧ nσ[m0 + 1] = n + 1 |
⌜m⌝ < # nσ, n < nσ[m], stutf(nσ) ⊦ ∃ m0. m0 < m ∧ nσ[m0] = n ∧ nσ[m0 + 1] = nσ[m0] + 1
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic