| max(x0) < a, ∀ m, n. m ≤ n ∧ n < # x0 → ¬ x0[n] < x0[m], x1 ⊑ x0, a < max(x1), max(x0) < max(x1) ⊦ x0 = [], max(x1) = a, x1 = [] |
⊦ x ⊑ y ↔ (∃ z. x + z = y)
Used simplifier rules: max-ge: ⊦ x ≠ [] → (¬ ¬ max(x + x0) < max(x) ↔ false);%a: ⊦ (x + y) + z = x + y + z; from specification list Used terms: x0, x1