| max(x0) < a0, ∀ a1. max(ins≤(a1, x0)) = max(x0) ∨ max(x0) < a1 ⊦ x0 = [], max(ins≤(a, a0 ' + x0)) = (max(x0) < a0 ⊃ a0;max(x0)), (max(x0) < a0 ⊃ a0;max(x0)) < a |
max(x0) < a0, ∀ a1. max(ins≤(a1, x0)) = max(x0) ∨ max(x0) < a1 ⊦ x0 = [], max(a ' + a0 ' + x0) = a0, a0 < a
Used simplifier rules: a: ⊦ (x + y) + z = x + y + z; from specification list%c: ⊦ a + x = a ' + x; from specification list%ins-y: ⊦ ¬ b < a → ins≤(a, b ' + x) = a + b + x; from specification olist