| stutf(nσ) ∧ ⌜m0⌝ < # nσ ∧ nσ[m] + 1 ≤ nσ[m0] → (∃ m1. m1 ≤ m0 ∧ nσ[m1] = nσ[m] + 1), # nσ = ∞, nσ[m] < nσ[m0], m < m0, stutf(nσ) ⊦ ∃ m0. nσ[m0] = nσ[m] + 1 |
# nσ = ∞, nσ[m1] = nσ[m] + 1, stutf(nσ), m < m0, nσ[m] < nσ[m0], m1 ≤ m0, nσ[m1] ≤ nσ[m0] ⊦ ∃ m0. nσ[m0] = nσ[m1]
Used simplifier rules: eqle-one: ⊦ m = n + 1 ∧ n < n0 → m ≤ n0; (forward) from specification nat%less-inf2: ⊦ ⌜m⌝ < ∞; from specification nat-inf%c: ⊦ m + n = n + m; from specification nat-basic2%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic2%succ-01: ⊦ m + 1 ≤ n ↔ m < n; from specification nat