| ⊦ stutf(nσ) ∧ ⌜n⌝ + ⌜1⌝ < leninv(nσ) ∧ inv(nσ)[n] + m + 1 < inv(nσ)[n + 1] → nσ[inv(nσ)[n] + m + 1] = n + 1 |
stutf(nσ), ⌜n⌝ + ⌜1⌝ < leninv(nσ), inv(nσ)[n] + m + 1 < inv(nσ)[n + 1] ⊦ nσ[inv(nσ)[n] + m + 1] = n + 1, inv(nσ)[n + 1] = 0
Used simplifier rules: f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic1