| # nσ = ∞, nσ[m1] = nσ[n1] ∧ (∀ m0. m1 < m0 → nσ[m0] = nσ[m1] + 1), ⌜n1⌝ < # nσ, ⌜n1⌝ + ⌜m⌝ + ⌜1⌝ < # nσ, stutf(nσ), ∀ m. ⌜m⌝ < # nσ ∧ nσ[m] = nσ[n1] → ¬ n1 < m ⊦ nσ[n1 + m + 1] = nσ[n1] + 1 |
nσ[m1] = nσ[n1], # nσ = ∞, stutf(nσ), ∀ m0. m1 < m0 → nσ[m0] = nσ[n1] + 1, ∀ m0. nσ[m0] = nσ[n1] → ¬ n1 < m0 ⊦ nσ[n1 + m + 1] = nσ[n1] + 1
Used simplifier rules: less-inf2: ⊦ ⌜m⌝ < ∞; from specification nat-inf%add-comm: ⊦ n∞1 + n∞2 = n∞2 + n∞1; from specification nat-inf%add-assoc: ⊦ (n∞ + n∞1) + n∞2 = n∞ + n∞1 + n∞2; from specification nat-inf%disj: ⊦ ⌜m⌝ ≠ ∞; from specification nat-inf-basic%add-inf-02: ⊦ ⌜n⌝ + n∞1 = ∞ ↔ n∞1 = ∞; from specification nat-inf%inf-less: ⊦ n∞ < ∞ ↔ n∞ ≠ ∞; from specification nat-inf