| # σ = ⌜ii(n0)⌝ , ∀ n0. lf(n0) = (σ to ii(n0)).l, ii(0) = 0, lf(0) = [], ∀ n. ii(n + 1) = ii(n) + # nextli0(lf(n)) ∧ ¬ # σ < ⌜ii(n + 1)⌝ ∧ (σ from ii(n)) to # nextli0(lf(n)) = ⌜nextli0(lf(n))⌝ , ∀ m, n. m ≤ n → ii(m) ≤ ii(n), ∀ n. lf(n + 1) = nextli(lf(n)), ∀ x. nextli(x) = x + nextli0(x), (finp(σ) ⊃ # σ = ⌜ii(n)⌝ ∧ (∀ m. n ≤ m → nextli0(lf(m)) = [] ∧ ii(m) = ii(n));∀ n. ∃ m. ii(m) ≤ n ∧ n < ii(m + 1)) ⊦ ii(n0) = ii(n0 + 1) |
lf(0) = [], ii(0) = 0, # σ = ⌜ii(n)⌝ , ii(n0) = ii(n), ∀ x. nextli(x) = x + nextli0(x), ∀ n. lf(n + 1) = nextli(lf(n)), ∀ m, n. m ≤ n → ii(m) ≤ ii(n), ∀ n0. lf(n0) = (σ to ii(n0)).l, ∀ m. n ≤ m → nextli0(lf(m)) = [] ∧ ii(m) = ii(n), ∀ n1. ii(n1 + 1) = ii(n1) + # nextli0(lf(n1)) ∧ ¬ ii(n) < ii(n1 + 1) ∧ (σ from ii(n1)) to # nextli0(lf(n1)) = ⌜nextli0(lf(n1))⌝ ⊦ ii(n) = ii(n0 + 1)
Used simplifier rules: less-fin: ⊦ ⌜m⌝ < ⌜n⌝ ↔ m < n; from specification nat-inf%inj: ⊦ ⌜m⌝ = ⌜m0⌝ ↔ m = m0; from specification nat-inf-basic%disj: ⊦ ⌜m⌝ ≠ ∞; from specification nat-inf-basic%notfin-sizeinf: ⊦ ¬ finp(σ) → # σ = ∞; from specification stream