| perm(a ' + x, ins≤(a, x)) ⊦ perm(ins≤(a, x), y) ↔ perm(a ' + x, y) |
perm(a ' + x, ins≤(a, x)), perm(ins≤(a, x), a ' + x) ⊦ perm(ins≤(a, x), y) ↔ perm(a ' + x, y)
Used simplifier rules: a: ⊦ (x + y) + z = x + y + z; from specification list%ref: ⊦ perm(x, x); from specification list-perm%app: ⊦ perm(x + y, x + z) ↔ perm(y, z); from specification list-perm%trans: ⊦ perm(x, y) ∧ perm(y, z) → perm(x, z); (forward) from specification list-perm%sym-01: ⊦ perm(x, y) → perm(y, x); (forward) from specification list-perm