| ii(0) = 0, lf(0) = [], ∀ m, n. m ≤ n → ii(m) ≤ ii(n), ∀ n. lf(n + 1) = nextli(lf(n)), ∀ x. nextli(x) = x + nextli0(x), ∃ m. ii(m) ≤ n1 ∧ n1 < ii(m + 1), ∀ n. ∃ m. ii(m) ≤ n ∧ n < ii(m + 1), ∀ n. lf(n) = nf to ii(n), ∀ n. ii(n + 1) = ii(n) + # nextli0(lf(n)) ∧ (nf from ii(n)) to # nextli0(lf(n)) = nextli0(lf(n)) ⊦ ∃ m. ii(m) ≤ n1 ∧ n1 < ii(m + 1) |
ii(0) = 0, lf(0) = [], ii(m) ≤ n1, n1 < ii(m + 1), ii(m) < ii(m + 1), ∀ m, n. m ≤ n → ii(m) ≤ ii(n), ∀ n. lf(n + 1) = nextli(lf(n)), ∀ x. nextli(x) = x + nextli0(x), ∀ n. ∃ m. ii(m) ≤ n ∧ n < ii(m + 1), ∀ n. lf(n) = nf to ii(n), ∀ n. ii(n + 1) = ii(n) + # nextli0(lf(n)) ∧ (nf from ii(n)) to # nextli0(lf(n)) = nextli0(lf(n)) ⊦ ii(m + 1) = 0, ∃ m. ii(m) ≤ n1 ∧ n1 < ii(m + 1)
Used simplifier rules: fle-01: ⊦ m ≤ n ∧ n < n0 → m < n0; (forward) from specification nat%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic1