| ⊦ max(ins≤(a, x)) = a, a < max(x) |
∀ a. max(ins≤(a, x0)) = a ∨ a < max(x0) ⊦ max(ins≤(a, a0 + x0)) = a, a < max(a0 + x0)
Used simplifier rules: max-base: ⊦ max(a ') = a;%list freely generated by [], +;;%ins-e: ⊦ ins≤(a, []) = a '; from specification olist