| stutf(nσ), # nσ = ∞ ∧ (∀ m. ∃ m0. m < m0 ∧ nσ[m] < nσ[m0]), stutf(nσ) ⊦ nσ[max∞(λ n0. ⌜n0⌝ < # nσ ∧ nσ[n0] = n).n] = n |
# nσ = ∞, stutf(nσ), ∀ m. ∃ m0. m < m0 ∧ nσ[m] < nσ[m0] ⊦ nσ[max∞(λ n0. nσ[n0] = n).n] = n
Used simplifier rules: less-inf2: ⊦ ⌜m⌝ < ∞; from specification nat-inf