| max(a0 ' + x0) < a, ∀ a. max(x0) < a → ins≤(a, x0).last = a ⊦ ins≤(a, a0 ' + x0).last = a |
⊦ x ≠ [] → max(a ' + x) = (max(x) < a ⊃ a;max(x))
x0 ≠ [], (max(x0) < a0 ⊃ a0;max(x0)) < a, ∀ a. max(x0) < a → ins≤(a, x0).last = a ⊦ ins≤(a, a0 ' + x0).last = a
Used simplifier rules: max-base: ⊦ max(a ') = a;%app: ⊦ x + [] = x; from specification list%a: ⊦ (x + y) + z = x + y + z; from specification list%ins-one: ⊦ b < a → ins≤(a, b ') = b ' + a '; from specification olist%last-def: ⊦ (x + a ').last = a; from specification list-last Used terms: x0, a0