| # nσ = ⌜m⌝ + ⌜1⌝ , max∞(λ n0. ¬ m < n0 ∧ nσ[n0] = nσ[n]).n < m, n ≤ m, max∞(λ n0. ¬ m < n0 ∧ nσ[n0] = nσ[n]).n ≤ m, nσ[n] ≤ nσ[m], max∞(λ n0. ¬ m < n0 ∧ nσ[n0] = nσ[n]).n < n, stutf(nσ) ⊦ max∞(λ n0. ¬ m < n0 ∧ nσ[n0] = nσ[n]) ≠ ∞ |
max∞(λ n0. ¬ m < n0 ∧ nσ[n0] = nσ[n]) = ∞, # nσ = ⌜m⌝ + ⌜1⌝ , n ≤ m, ∞.n ≤ m, nσ[n] ≤ nσ[m], ∞.n < n, stutf(nσ), ∞.n < m ⊦
Used simplifier rules: fle: ⊦ m < n ∧ n ≤ n0 → m < n0; (forward) from specification nat