| max(ins≤(a, x0)) < a0, a0 < a, max(ins≤(a, x0)) < a, ∀ a. max(ins≤(a, x0)) = a ∨ a < max(x0) ⊦ a0 = a, a < max(a0 ' + x0) |
⊦ ordered≤(a ' + x) → ins≤(a, x) = a ' + x
¬ ordered≤(a ' + x0), max(ins≤(a, x0)) < a0, a0 < a, max(ins≤(a, x0)) < a, ∀ a. max(ins≤(a, x0)) = a ∨ a < max(x0) ⊦ a0 = a, a < max(a0 ' + x0)
Used simplifier rules: max-ge-first: ⊦ ¬ ¬ max(a ' + x) < a ↔ false;%a: ⊦ (x + y) + z = x + y + z; from specification list Used terms: x0, a