| (⌜n0⌝ < # nσ ∧ nσ[n0] = n + 1) ∧ (∀ m. ⌜m⌝ < # nσ ∧ nσ[m] = n + 1 → ¬ n0 < m), leninv(nσ) = ⌜n1⌝ , max∞(λ n0. ⌜n0⌝ < # nσ ∧ nσ[n0] = n) = ⌜n2⌝ , n0 ≤ n2, 1 + n < n1, stutf(nσ) ⊦ |
max∞(λ n0. ⌜n0⌝ < # nσ ∧ nσ[n0] = n) = ⌜n2⌝ , leninv(nσ) = ⌜n1⌝ , nσ[n0] = n + 1, n + 1 < n1, stutf(nσ), 1 + n < n1, n0 ≤ n2, ⌜n0⌝ < # nσ, ∀ m. ⌜m⌝ < # nσ ∧ nσ[m] = n + 1 → ¬ n0 < m ⊦
Used simplifier rules: lf-02: ⊦ m < n ∧ m = n0 → n0 < n; (forward) from specification nat-basic1%c: ⊦ m + n = n + m; from specification nat-basic2