| σ = ⌜x0⌝ ⊦ # σ < ⌜n⌝ , (σ to n) + ⌜x⌝ from # x + n = [] ∧ (⌜n0⌝ < #((σ to n) + ⌜x⌝ from # x + n) → ((σ to n) + ⌜x⌝ from # x + n)[n0] = ([])[n0]) |
n ≤ # x0 ⊦ (x0 to n) + x from # x + n = []
Used simplifier rules: size-fin: ⊦ # ⌜x⌝ = ⌜# x⌝ ;%to-fin: ⊦ ⌜x⌝ to n = ⌜x to n⌝ ;%from-appfin: ⊦ ⌜x⌝ + ⌜y⌝ from n = ⌜x + y from n⌝ ;%append-assoc: ⊦ (σ + σ1) + σ2 = σ + σ1 + σ2;%fin-empty: ⊦ ⌜x⌝ = [] ↔ x = [];%length-to: ¬ # x < n ⊦ #(x to n) = n;%length-from: ¬ # x < n ⊦ #(x from n) = # x - n;%zero-01: ⊦ ¬ m < 0; from specification nat-basic1%zero: ⊦ m - m = 0; from specification nat%cancel-01: ⊦ m + n - n + n1 = m - n1; from specification nat%c: ⊦ m + n = n + m; from specification nat-basic2%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic2%ref-1: ⊦ ¬ n < n; from specification nat-basic1%l: ⊦ m + n < m + n0 ↔ n < n0; from specification nat-basic2%a: ⊦ (x + y) + z = x + y + z; from specification list%le-ls-simp: ⊦ m ≤ n → (n < m ↔ false); from specification nat%len: ⊦ #(x + y) = # x + # y; from specification list%lels: ⊦ ¬ m < n ↔ n ≤ m; from specification nat%less-fin: ⊦ ⌜m⌝ < ⌜n⌝ ↔ m < n; from specification nat-inf