| ins≤(a, x0) ≠ [], a0 < a, max(x0) < a, ∀ a. max(x0) < a → ins≤(a, x0).last = a ⊦ x0 = [], ins≤(a, x0).last = a, max(x0) < a0 |
a0 < a, max(x0) < a, ∀ a. max(x0) < a → ins≤(a, x0).last = a ⊦ x0 = [], ins≤(a, x0).last = a, max(x0) < a0
Used simplifier rules: empty: ⊦ ins≤(a, x) ≠ []; from specification olist