| ∀ a. max(ins≤(a, x0)) = max(x0) ∨ x0 = [] ∨ max(x0) < a ⊦ x0 = [], max(ins≤(a, a0 ' + x0)) = max(a0 ' + x0), max(a0 ' + x0) < a |
∀ a1. max(ins≤(a1, x0)) = max(x0) ∨ max(x0) < a1 ⊦ x0 = [], max(ins≤(a, a0 ' + x0)) = (max(x0) < a0 ⊃ a0;max(x0)), (max(x0) < a0 ⊃ a0;max(x0)) < a
Used simplifier rules: max-rec: ⊦ x ≠ [] → max(a ' + x) = (max(x) < a ⊃ a;max(x));%a: ⊦ (x + y) + z = x + y + z; from specification list