∀ a. ins≤(a, x0) -1l a = x0 ⊦ ins≤(a, a0 ' + x0) -1l a = a0 ' + x0
Used simplifier rules: c: ⊦ a + x = a ' + x; from specification list