| stutf(nσ), (leninv(nσ) = ∞ ⊃ ⌜λ m. max∞(λ n. ⌜n⌝ < # nσ ∧ nσ[n] = m).n⌝ ;⌜λ m. max∞(λ n. ⌜n⌝ < # nσ ∧ nσ[n] = m).n⌝ to leninv(nσ).n)[nσ[n]] < n, ⌜nσ[n]⌝ < leninv(nσ), ⌜n⌝ < # nσ, stutf(nσ) ⊦ |
⌜nσ[n]⌝ < leninv(nσ), ⌜n⌝ < # nσ, stutf(nσ), (leninv(nσ) = ∞ ⊃ ⌜λ m. max∞(λ n. ⌜n⌝ < # nσ ∧ nσ[n] = m).n⌝ ;⌜(λ m. max∞(λ n. ⌜n⌝ < # nσ ∧ nσ[n] = m).n) to leninv(nσ).n⌝ )[nσ[n]] < n ⊦
Used simplifier rules: to-inf: ⊦ ⌜nnf⌝ to n = ⌜nnf to n⌝ ; from specification stream[natstream]