∀ a. max(ins≤(a, x0)) = a ∨ a < max(x0) ⊦ max(ins≤(a, a0 ' + x0)) = a, a < max(a0 ' + x0)
Used simplifier rules: c: ⊦ a + x = a ' + x; from specification list