| a0 < a, ∀ a1. max(ins≤(a1, x0)) = max(x0) ∨ max(x0) < a1 ⊦ x0 = [], max(a0 + ins≤(a, x0)) = max(x0), max(x0) < a0, max(x0) < a |
a0 < a, ∀ a1. max(ins≤(a1, x0)) = max(x0) ∨ max(x0) < a1 ⊦ x0 = [], max(a0 ' + ins≤(a, x0)) = max(x0), max(x0) < a0, max(x0) < a
Used simplifier rules: c: ⊦ a + x = a ' + x; from specification list