| stutf(nσ) ∧ ⌜m⌝ < # nσ ∧ n ≤ nσ[m] → (∃ m0. m0 ≤ m ∧ nσ[m0] = n), ∀ n0. nσ[n0] ≠ n, # nσ = ∞, n ≤ nσ[m], stutf(nσ), ∀ m0. m < m0 → nσ[m0] = nσ[m] + 1 ⊦ nσ[∞.n + 1] = n + 1 |
# nσ = ∞, m0 ≤ m, nσ[m0] ≤ nσ[m], stutf(nσ), ∀ n0. nσ[n0] ≠ nσ[m0], ∀ m0. m < m0 → nσ[m0] = nσ[m] + 1 ⊦ nσ[∞.n + 1] = nσ[m0] + 1
Used simplifier rules: less-inf2: ⊦ ⌜m⌝ < ∞; from specification nat-inf