| ∀ nσ. ¬((∀ n1. nσ[n1] ≠ n0) ∧ # nσ = ∞ ∧ stutf(nσ) ∧ (∀ m. ∃ m0. m < m0 ∧ nσ[m] < nσ[m0])), ∀ n1. nσ[n1] ≠ n0 +1, # nσ = ∞, stutf(nσ), ∀ m. ∃ m0. m < m0 ∧ nσ[m] < nσ[m0] ⊦ |
# nσ = ∞, stutf(nσ), ∀ m. ∃ m0. m < m0 ∧ nσ[m] < nσ[m0], ∀ nσ0. ¬(∀ n1. nσ0[n1] ≠ n0) ∨ # nσ0 ≠ ∞ ∨ ¬ stutf(nσ0) ∨ ¬(∀ m. ∃ m0. m < m0 ∧ nσ0[m] < nσ0[m0]), ∀ n. nσ[n] ≠ n0 + 1 ⊦
Used simplifier rules: succ: ⊦ m +1 = m + 1; from specification nat-basic2