| # nσ = ∞, stutf(nσ), ∃ m0. 0 < m0 ∧ nσ[0] < nσ[m0], ∀ n. nσ[n] ≠ 1, ∀ n0, nσ. n0 < 0 → (∀ n1. nσ[n1] ≠ n0 + 1) ∧ # nσ = ∞ ∧ stutf(nσ) ∧ (∀ m. ∃ m0. m < m0 ∧ nσ[m] < nσ[m0]) → false ⊦ |
# nσ = ∞, stutf(nσ), ∀ n. nσ[n] ≠ 1, ∀ n0, nσ. n0 < 0 → (∀ n1. nσ[n1] ≠ n0 + 1) ∧ # nσ = ∞ ∧ stutf(nσ) ∧ (∀ m. ∃ m0. m < m0 ∧ nσ[m] < nσ[m0]) → false ⊦ m = 0, nσ[m] = 0
Used simplifier rules: stutf-zero: ⊦ stutf(nσ) → nσ[0] = 0;%zero: ⊦ 0 < m ↔ m ≠ 0; from specification nat-basic1