| # nσ = ⌜n⌝ + ⌜1⌝ , leninv(nσ) = ⌜n1⌝ , (¬ n < n2 ∧ nσ[n2] = nσ[n]) ∧ (∀ m. ¬ n < m ∧ nσ[m] = nσ[n] → ¬ n2 < m), nσ[n] < n1, stutf(nσ) ⊦ n2 = n |
nσ[n2] = nσ[n], leninv(nσ) = ⌜n1⌝ , # nσ = ⌜n⌝ + ⌜1⌝ , n2 < n, stutf(nσ), nσ[n] < n1, ∀ m. ¬ n < m ∧ nσ[m] = nσ[n] → ¬ n2 < m ⊦ n2 = n
Used simplifier rules: f: ⊦ m < n → n ≠ 0; from specification nat-basic1%lf-02: ⊦ m < n ∧ m = n0 → n0 < n; (forward) from specification nat-basic1%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic1%neq-01: ⊦ m ≠ n → (¬ m < n ↔ n < m); from specification nat-basic1