| perm((x + ins≤(a, y)) -1l a, x + y) ⊦ perm((x + ins≤(a, y)) -1l a, z) ↔ perm(x + y, z) |
perm((x + ins≤(a, y)) -1l a, x + y), perm(x + y, (x + ins≤(a, y)) -1l a) ⊦ perm((x + ins≤(a, y)) -1l a, z) ↔ perm(x + y, z)
Used simplifier rules: a: ⊦ (x + y) + z = x + y + z; from specification list%app: ⊦ perm(x + y, x + z) ↔ perm(y, z); from specification list-perm%ref: ⊦ perm(x, x); from specification list-perm%trans: ⊦ perm(x, y) ∧ perm(y, z) → perm(x, z); (forward) from specification list-perm%sym-01: ⊦ perm(x, y) → perm(y, x); (forward) from specification list-perm