| ¬ a < min(x3 + x), min(x3 + a0 ' + x) = min(x + x3), min(x + a ' + x3) = min(x3 + x), a < min(x + x3), ∀ x1, x2. #(x1 + x2) < #((a + x3) + (a0 + x)) → true → x1 + x2 = [] ∨ min(x1 + x2) = min(x2 + x1) ⊦ a = min(x3 + x), x3 + x = [], x + x3 = [], a0 < min(x + x3), a0 < min(x3 + x) |
min(x3 + a0 ' + x) = min(x + x3), min(x + a ' + x3) = min(x3 + x), a < min(x + x3), min(x3 + x) < a, min(x3 + x) < min(x + x3), ∀ x1, x2. #(x1 + x2) < #((a + x3) + (a0 + x)) → true → x1 + x2 = [] ∨ min(x1 + x2) = min(x2 + x1) ⊦ a = min(x3 + x), x3 + x = [], x + x3 = [], a0 < min(x + x3), a0 < min(x3 + x)
Used simplifier rules: lel: ⊦ a < b ∧ a = c → c < b; (forward) from specification oelem%transitivity: ⊦ a < b ∧ b < c → a < c; (forward) from specification oelem%sls: ⊦ a ≠ b → (¬ a < b ↔ b < a); from specification oelem