| ⊦ stutf(nσ) ∧ ⌜n⌝ < # nσ ∧ ⌜nσ[n]⌝ < leninv(nσ) → (¬ ¬ inv(nσ)[nσ[n]] < n ↔ false) |
inv(nσ)[nσ[n]] < n, ⌜nσ[n]⌝ < leninv(nσ), ⌜n⌝ < # nσ, stutf(nσ) ⊦
Used simplifier rules: f: ⊦ m < n → n ≠ 0; from specification nat-basic1%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic1