| # nσ = ∞, nσ[m] = n1 ∧ (∀ m0. m < m0 → nσ[m0] = nσ[m] + 1), ⌜n⌝ < # nσ, stutf(nσ), max∞(λ n0. ⌜n0⌝ < # nσ ∧ nσ[n0] = nσ[n]).n < n, nσ[n] ≤ n1 ⊦ |
# nσ = ∞, stutf(nσ), nσ[n] ≤ nσ[m], max∞(λ n0. nσ[n0] = nσ[n]).n < n, ∀ m0. m < m0 → nσ[m0] = nσ[m] + 1 ⊦
Used simplifier rules: less-inf2: ⊦ ⌜m⌝ < ∞; from specification nat-inf