| ∀ m, n, n2, n1. ¬(m * n + n2 ≤ m0 * n + n1 ∧ n1 < n ∧ m0 < m ∧ n2 < n), m * n + n2 ≤ m0 +1 * n + n1, n1 < n, m0 +1 < m, n2 < n ⊦ |
n2 < n, m * n + n2 ≤ (n * m0 + n) + n1, n1 < n, m0 + 1 < m, ∀ m1, n0, n3, n4. ¬ m1 * n0 + n3 ≤ m0 * n0 + n4 ∨ ¬ n4 < n0 ∨ ¬ m0 < m1 ∨ ¬ n3 < n0 ⊦
Used simplifier rules: dist: ⊦ m0 * (m + n) = m0 * m + m0 * n;%one: ⊦ m0 * 1 = m0;%mult-a: ⊦ m0 * m * n = (m0 * m) * n;%mult-c: ⊦ m * n = n * m;%c: ⊦ m + n = n + m; from specification nat-basic2%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic2%succ: ⊦ m +1 = m + 1; from specification nat-basic2