stutf(nσ), ⌜n⌝ + ⌜1⌝ < leninv(nσ), inv(nσ)[n + 1] ≤ inv(nσ)[n] ⊦
Used simplifier rules: lels: ⊦ ¬ m < n ↔ n ≤ m; from specification nat