| ∀ a. max(ins≤(a, x0)) = max(x0) ∨ x0 = [] ∨ max(x0) < a ⊦ max(ins≤(a, a0 + x0)) = max(a0 + x0), a0 + x0 = [], max(a0 + x0) < a |
∀ a. max(ins≤(a, x0)) = max(x0) ∨ x0 = [] ∨ max(x0) < a ⊦ max(ins≤(a, a0 ' + x0)) = max(a0 ' + x0), max(a0 ' + x0) < a
Used simplifier rules: a: ⊦ (x + y) + z = x + y + z; from specification list%e-01: ⊦ a ' + x ≠ []; from specification list%c: ⊦ a + x = a ' + x; from specification list