| a = a0, m ≤ # x0, ∀ a1, m0, b0. a1 ∈ x0 ∧ #oc(a1, x0) ≠ 1 ∧ m0 < # x0 → a1 ∈ x0[m0, b0] ⊦ #oc(a, a0 ') + #oc(a, x0) = 0, a ∈ (a0 ' + x0)[m, b], a ≠ a0 ∧ #oc(a, x0) = 1, ¬ a ∈ x0 ∧ #oc(a, a0 ') = 1 |
m ≤ # x0, a0 ∈ x0, ∀ a1, m0, b0. a1 ∈ x0 ∧ #oc(a1, x0) ≠ 1 ∧ m0 < # x0 → a1 ∈ x0[m0, b0] ⊦ a0 ∈ (a0 ' + x0)[m, b]
Used simplifier rules: one: ⊦ #oc(a, a ') = 1;%c: ⊦ m + n = n + m; from specification nat-basic2%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic2%oz: ⊦ m + 1 ≠ 0; from specification nat-basic2