| ar[n0 + 1] < ar[n, a][n0], n0 + 1 < m, n0 + 1 < # ar, m ≤ # ar, n ≤ n0, ∀ n0. n < n0 ∧ n0 + 1 < m → ¬ ar[n0 + 1] < ar[n0] ⊦ ar[n + 1] < a |
⊦ m ≠ n → ar[n, a][m] = ar[m]
n0 + 1 < # ar, n0 + 1 < m, ar[n0 + 1] < ar[n0], n ≤ n0, m ≤ # ar, ∀ n0. n < n0 ∧ n0 + 1 < m → ¬ ar[n0 + 1] < ar[n0] ⊦ n0 = n, ar[n + 1] < a
Used simplifier rules: ⊦ m ≤ m; (s)% ⊦ m < n ↔ ¬ n ≤ m; (ss)%let: ⊦ n ≤ n0 ∧ n0 ≤ n1 → n ≤ n1; (forward) from specification nat%fle: ⊦ m < n ∧ n ≤ n0 → m < n0; (forward) from specification nat% ⊦ ¬ m + n < m; (s)%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic%c: ⊦ m + n = n + m; from specification nat-basic%m < # ar ⊦ ar[m, a][m] = a; (s) Used terms: n0, a, n, ar