| # nσ = ⌜inv(nσ)[n]⌝ + ⌜1⌝ , ⌜m⌝ = leninv(nσ), 1 + n < m, stutf(nσ) ⊦ |
# nσ = ⌜inv(nσ)[n]⌝ + ⌜1⌝ , m = m0 +1, ⌜m⌝ = leninv(nσ), 1 + n < m, stutf(nσ) ⊦
Used simplifier rules: nat freely generated by 0, +1;;%n0 < n ⊦ ¬ m + (* n) < (* n0); (s)%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic%c: ⊦ m + n = n + m; from specification nat-basic