| ∀ m0, m, nσ. m1 = m0 - m ∧ # nσ = ∞ ∧ nσ[m0] = nσ[m] + 1 ∧ m < m0 ∧ stutf(nσ) → (∃ m1. m ≤ m1 ∧ m1 < m0 ∧ nσ[m] = nσ[m1] ∧ nσ[m1 + 1] = nσ[m1] + 1), m1 +1 = m0 - m, # nσ = ∞, nσ[m0] = nσ[m] + 1, m < m0, stutf(nσ) ⊦ ∃ m1. m ≤ m1 ∧ m1 < m0 ∧ nσ[m] = nσ[m1] ∧ nσ[m1 + 1] = nσ[m1] + 1 |
# nσ = ∞, nσ[m0] = nσ[m] + 1, m1 + 1 = m0 - m, m < m0, stutf(nσ), ∀ m0, m, nσ. m1 = m0 - m ∧ # nσ = ∞ ∧ nσ[m0] = nσ[m] + 1 ∧ m < m0 ∧ stutf(nσ) → (∃ m1. m ≤ m1 ∧ m1 < m0 ∧ nσ[m] = nσ[m1] ∧ nσ[m1 + 1] = nσ[m1] + 1) ⊦ ∃ m1. m ≤ m1 ∧ m1 < m0 ∧ nσ[m] = nσ[m1] ∧ nσ[m1 + 1] = nσ[m1] + 1
Used simplifier rules: succ: ⊦ m +1 = m + 1; from specification nat-basic2