| ∀ x1, x2. # x1 + # x2 < #(a + x3) + # x0 → true → x1 + x2 = [] ∨ max(x1 + x2) = max(x2 + x1) ⊦ (max(x3 + x0) < a ⊃ a;max(x3 + x0)) = max(x0 + a ' + x3), x3 + x0 = [] |
x0 = a0 + x, ∀ x1, x2. # x1 + # x2 < #(a + x3) + # x0 → true → x1 + x2 = [] ∨ max(x1 + x2) = max(x2 + x1) ⊦ (max(x3 + x0) < a ⊃ a;max(x3 + x0)) = max(x0 + a ' + x3), x3 + x0 = []
Used simplifier rules: max-rec: ⊦ x ≠ [] → max(a ' + x) = (max(x) < a ⊃ a;max(x));%list freely generated by [], +;;%app: ⊦ x + [] = x; from specification list%a: ⊦ (x + y) + z = x + y + z; from specification list%Nil: ⊦ [] + x = x; from specification list