| n0 ≤ #(nf to n0), ∀ m, nf. m ≤ n0 → (nf to n0) to m = nf to m ⊦ ((nf to n0) to n0) + ((nf to n0) + nf(n0) ')[n0] ' = nf to n0 + 1 |
∀ m, nf. m ≤ n0 → (nf to n0) to m = nf to m ⊦ ((nf to n0) to n0) + ((nf to n0) + nf(n0) ')[n0] ' = nf to n0 + 1
Used simplifier rules: size-inf-to: ⊦ #(nf to n) = n;%ler: ⊦ m ≤ m; from specification nat