| x0 = firstn(# x0 - # z, x0) + z, # x0 = n1 + # z, x0 = firstn(n1 - 1, x0) + a ' + z, # z ≤ # x0, ∀ z, a. x0 = firstn(# x0 - 1 + # z, x0) + a ' + z → x0 = firstn(# x0 - # z, x0) + z ⊦ x0 = firstn(n1, x0) + z, n1 = 0 |
Used simplifier rules: eq-01: ⊦ m + n - m = n; from specification nat%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic2%c: ⊦ m + n = n + m; from specification nat-basic2