| stutf(nσ), # nσ = ∞ ∧ (∀ m. ∃ m0. m < m0 ∧ nσ[m] < nσ[m0]), ∞.n ≤ max∞(λ n0. ⌜n0⌝ < # nσ ∧ nσ[n0] = n).n, stutf(nσ), (∀ n0. ∃ n1. n0 < n1 ∧ ⌜n1⌝ < # nσ ∧ nσ[n1] = n + 1) ∨ (∀ n0. ¬ ⌜n0⌝ < # nσ ∨ nσ[n0] ≠ n + 1) ⊦ |
# nσ = ∞, stutf(nσ), ∞.n ≤ max∞(λ n0. nσ[n0] = n).n, ∀ m. ∃ m0. m < m0 ∧ nσ[m] < nσ[m0], (∀ n0. ∃ n1. n0 < n1 ∧ nσ[n1] = n + 1) ∨ (∀ n0. nσ[n0] ≠ n + 1) ⊦
Used simplifier rules: less-inf2: ⊦ ⌜m⌝ < ∞; from specification nat-inf