| (a0 ' + x0)[m] = a0, m ≤ # x0, ∀ m0, b0. x0[m0] ≠ b0 ∧ m0 < # x0 → #oc(x0[m0], x0[m0, b0]) = #oc(x0[m0], x0) - 1 ⊦ #oc((a0 ' + x0)[m], (a0 ' + x0)[m, b]) = #oc((a0 ' + x0)[m], a0 ') + #oc((a0 ' + x0)[m], x0) - 1, (a0 ' + x0)[m] = b |
(a0 ' + x0)[m] = a0, m ≤ # x0, ∀ m0, b0. x0[m0] ≠ b0 ∧ m0 < # x0 → #oc(x0[m0], x0[m0, b0]) = #oc(x0[m0], x0) - 1 ⊦ a0 = b, #oc(a0, (a0 ' + x0)[m, b]) = #oc(a0, x0)
Used simplifier rules: one: ⊦ #oc(a, a ') = 1;%c: ⊦ m + n = n + m; from specification nat-basic2%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic2%add-base: ⊦ n + 0 = n; from specification nat-basic2%add-01: ⊦ n ≤ m → m + n0 - n = (m - n) + n0; from specification nat