| # nσ = ∞, nσ[m2] = nσ[m1] + 1, stutf(nσ), ∀ n. ∃ m. nσ[m] = n, ∀ m. ∃ m0. m < m0 ∧ nσ[m] < nσ[m0], n ≠ 0 → nσ[m] = n - 1 ∧ ¬(m < m0 → nσ[m0] = n - 1), m1 < m2 → nσ[m2] = nσ[m1] ⊦ |
⊦ mon≤(nσ) ∧ m ≤ n ∧ ⌜n⌝ < # nσ → nσ[m] ≤ nσ[n]
Used simplifier rules: stutf-monle: ⊦ stutf(nσ) → (¬ mon≤(nσ) ↔ false);%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic2%c: ⊦ m + n = n + m; from specification nat-basic2%eq: ⊦ m = n + 1 → ¬ m ≤ n; from specification nat%less-inf2: ⊦ ⌜m⌝ < ∞; from specification nat-inf%lels-01: ⊦ ¬ m ≤ n ↔ n < m; from specification nat%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic1%eq: ⊦ m = m + n ↔ n = 0; from specification nat-basic2 Used terms: nσ, m2, m1