| ∀ m, a, b. x0[m] = a ∧ a ≠ b ∧ m < # x0 → #oc(a, x0[m, b]) = #oc(a, x0) -1 ⊦ (a0 + x0)[m] = a ∧ a ≠ b ∧ m < #(a0 + x0) → #oc(a, (a0 + x0)[m, b]) = #oc(a, a0 + x0) -1 |
m ≤ # x0, ∀ m0, b0. x0[m0] ≠ b0 ∧ m0 < # x0 → #oc(x0[m0], x0[m0, b0]) = #oc(x0[m0], x0) - 1 ⊦ #oc((a0 ' + x0)[m], (a0 ' + x0)[m, b]) = #oc((a0 ' + x0)[m], a0 ') + #oc((a0 ' + x0)[m], x0) - 1, (a0 ' + x0)[m] = b
Used simplifier rules: ocappend: ⊦ #oc(a, x + y) = #oc(a, x) + #oc(a, y);%lels: ⊦ ¬ m < n ↔ n ≤ m; from specification nat%c: ⊦ m + n = n + m; from specification nat-basic2%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic2%s: ⊦ m < n + 1 ↔ ¬ n < m; from specification nat-basic2%succ: ⊦ m +1 = m + 1; from specification nat-basic2%len-05: ⊦ #(a ' + x) = (# x)+1; from specification list%pred-03: ⊦ n -1 = n - 1; from specification nat%a: ⊦ (x + y) + z = x + y + z; from specification list%c: ⊦ a + x = a ' + x; from specification list