| ⊦ perm(ins≤(a, [] + y), ins≤(a, []) + y) |
⊦ perm(a ' + y, ins≤(a, y)), perm(ins≤(a, y), a ' + y)
Used simplifier rules: ins-e: ⊦ ins≤(a, []) = a ';%sym-02: ⊦ ¬ perm(x, y) → ¬ perm(y, x); (forward) from specification list-perm%a: ⊦ (x + y) + z = x + y + z; from specification list%Nil: ⊦ [] + x = x; from specification list