| a0 < a, ∀ a. max(ins≤(a, x0)) = a ∨ a < max(x0) ⊦ max(ins≤(a, x0)) = a, max(ins≤(a, x0)) < a0, a < max(a0 ' + x0) |
⊦ x ≠ [] → max(a ' + x) = (max(x) < a ⊃ a;max(x))
x0 ≠ [], a0 < a, ∀ a. max(ins≤(a, x0)) = a ∨ a < max(x0) ⊦ max(ins≤(a, x0)) = a, max(ins≤(a, x0)) < a0, a < (max(x0) < a0 ⊃ a0;max(x0))
Used simplifier rules: max-base: ⊦ max(a ') = a;%ins-e: ⊦ ins≤(a, []) = a '; from specification olist Used terms: x0, a0