| m1 < # x0, ∀ m0, b0. x0[m0] ≠ b0 ∧ m0 < # x0 → #oc(x0[m0], x0[m0, b0]) = #oc(x0[m0], x0) - 1 ⊦ #oc(x0[m1], x0[m1, b]) = #oc(x0[m1], x0) - 1, x0[m1] = a0, x0[m1] = b, x0 = [] |
#oc(x0[m1], x0) = m + 1 ∧ #oc(x0[m1], x0) ≠ 0, m1 < # x0, ∀ m0, b0. x0[m0] ≠ b0 ∧ m0 < # x0 → #oc(x0[m0], x0[m0, b0]) = #oc(x0[m0], x0) - 1 ⊦ #oc(x0[m1], x0[m1, b]) = m, x0[m1] = a0, x0[m1] = b, x0 = []
Used simplifier rules: oc-zero: ⊦ #oc(a, x) = 0 ↔ ¬ a ∈ x;%get-in: ⊦ m < # x → (¬ x[m] ∈ x ↔ false); from specification list-del%n ≠ 0 ⊦ m = n - 1 ↔ n = m + 1; (elim) Used terms: #oc(x0[m1], x0), m