| ¬(a0 ' + x0 ≠ [] ∧ n ≠ 0), m ≤ # x0, n ≤ # x0, ∀ m, n, a. m < # x0 ∧ n < # x0 → (a ∈ x0[m, x0[n]][n, x0[m]] ↔ a ∈ x0) ⊦ a ∈ (a0 ' + x0)[m, (a0 ' + x0)[n]][n, (a0 ' + x0)[m]] ↔ a = a0 ∨ a ∈ x0 |
m ≤ # x0, ∀ m, n, a. m < # x0 ∧ n < # x0 → (a ∈ x0[m, x0[n]][n, x0[m]] ↔ a ∈ x0) ⊦ a ∈ (a0 ' + x0)[m, a0][0, (a0 ' + x0)[m]] ↔ a = a0 ∨ a ∈ x0
Used simplifier rules: get-zero-01: ⊦ (a ' + x)[0] = a;%lez: ⊦ 0 ≤ m; from specification nat%a: ⊦ (x + y) + z = x + y + z; from specification list%e-01: ⊦ a ' + x ≠ []; from specification list