| ii(0) = 0, ii(m + 1) = ii(m) + # lf(m), (nf from ii(m)) to # lf(m) = lf(m), ii(m) < ii(m0), m0 ≤ m, m < n0, m0 < n0, ∀ m. m < n0 → ii(m + 1) = ii(m) + # lf(m) ∧ (nf from ii(m)) to # lf(m) = lf(m) ∧ (∀ m0. m0 ≤ m → ii(m0) ≤ ii(m)), ∀ m0. m0 ≤ m → ii(m0) ≤ ii(m) ⊦ m0 = n0 + 1, m = n0 + 1, n0 = m, n0 = 0, ii(m0) = 0 |
Used simplifier rules: ls-le-simp: ⊦ m < n → (n ≤ m ↔ false); from specification nat Used terms: m0