| ∀ x0, x1, x2. x3 + x0 = x1 + x2 ∧ # x3 < # x1 → x1 = [] ∨ (∃ y. x1 = x3 + y ∧ x0 = y + x2), (a + x3) + x0 = x1 + x2, #(a + x3) < # x1 ⊦ x1 = [], ∃ y. x1 = (a + x3) + y ∧ x0 = y + x2 |
(a ' + x3) + x0 = x1 + x2, # x3 + 1 < # x1, ∀ x0, x1, x2. x3 + x0 = x1 + x2 ∧ # x3 < # x1 → x1 = [] ∨ (∃ y. x1 = x3 + y ∧ x0 = y + x2), a ∈ x1 ∨ a ∈ x2 ⊦ x1 = [], ∃ y. x1 = (a ' + x3) + y ∧ x0 = y + x2
Used simplifier rules: c: ⊦ a + x = a ' + x;%a: ⊦ (x + y) + z = x + y + z;%len-05: ⊦ #(a ' + x) = (# x)+1;%in-14: ⊦ a ' + x = y → a ∈ y;%in-append: ⊦ a ∈ x + y ↔ ¬ ¬(a ∈ x ∨ a ∈ y);%succ: ⊦ m +1 = m + 1; from specification nat-basic2