| lf(0) = [], ii(0) = 0, # σ = ⌜ii(n)⌝ , ii(n0) = ii(n), ∀ x. nextli(x) = x + nextli0(x), ∀ n. lf(n + 1) = nextli(lf(n)), ∀ m, n. m ≤ n → ii(m) ≤ ii(n), ∀ n0. lf(n0) = (σ to ii(n0)).l, ∀ m. n ≤ m → nextli0(lf(m)) = [] ∧ ii(m) = ii(n), ∀ n1. ii(n1 + 1) = ii(n1) + # nextli0(lf(n1)) ∧ ¬ ii(n) < ii(n1 + 1) ∧ (σ from ii(n1)) to # nextli0(lf(n1)) = ⌜nextli0(lf(n1))⌝ ⊦ ii(n) = ii(n0 + 1) |
Used simplifier rules: neq-01: ⊦ m ≠ n → (¬ m < n ↔ n < m); from specification nat-basic1%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic1%lf-02: ⊦ m < n ∧ m = n0 → n0 < n; (forward) from specification nat-basic1%lf-01: ⊦ m < n ∧ n = n0 → m < n0; (forward) from specification nat-basic1%l-02: ⊦ ¬ m + n < m; from specification nat-basic2%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic2%c: ⊦ m + n = n + m; from specification nat-basic2 Used terms: n0