| # nσ = ⌜n⌝ + ⌜1⌝ , leninv(nσ) = ∞, (¬ n < n1 ∧ nσ[n1] = nσ[n]) ∧ (∀ m. ¬ n < m ∧ nσ[m] = nσ[n] → ¬ n1 < m), stutf(nσ) ⊦ n1 = n |
nσ[n1] = nσ[n], leninv(nσ) = ∞, # nσ = ⌜n⌝ + ⌜1⌝ , n1 < n, stutf(nσ), ∀ m. ¬ n < m ∧ nσ[m] = nσ[n] → ¬ n1 < m ⊦ n1 = n
Used simplifier rules: f: ⊦ m < n → n ≠ 0; from specification nat-basic1%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic1%neq-01: ⊦ m ≠ n → (¬ m < n ↔ n < m); from specification nat-basic1