| a0 ' + x0 ≠ [] ∧ m ≠ 0, m ≤ # x0, ∀ m, a. m < # x0 → x0[m] = a ∨ #oc(a, x0[m, a]) = #oc(a, x0) + 1 ∨ x0 = [] ⊦ a = a0, (a0 ' + x0).rest[m - 1] = a, #oc(a, (a0 ' + x0)[m, a]) = 1 + #oc(a, x0) |
m ≤ # x0, ∀ m, a. m < # x0 → x0[m] = a ∨ #oc(a, x0[m, a]) = #oc(a, x0) + 1 ∨ x0 = [] ⊦ #oc(a, (a0 ' + x0)[m, a]) = 1 + #oc(a, x0), m = 0, a = a0, x0[m - 1] = a
Used simplifier rules: e-01: ⊦ a ' + x ≠ []; from specification list%a: ⊦ (x + y) + z = x + y + z; from specification list%c-07: ⊦ (a ' + x).rest = x; from specification list