| ¬ nσ[n] < n1, # nσ = ⌜n⌝ + ⌜1⌝ , leninv(nσ) = ⌜n1⌝ , stutf(nσ) ⊦ ((λ m. max∞(λ n0. ¬ n < n0 ∧ nσ[n0] = m).n) to n1)[nσ[n]] = n |
# nσ = ⌜n⌝ + ⌜1⌝ , leninv(nσ) = ⌜n1⌝ , stutf(nσ), n1 ≤ nσ[n] ⊦ ((λ m. max∞(λ n0. ¬ n < n0 ∧ nσ[n0] = m).n) to n1)[nσ[n]] = n
Used simplifier rules: lels: ⊦ ¬ m < n ↔ n ≤ m; from specification nat