| stutf(nσ) ⊦ ∀ n. # nσ ≠ ⌜n⌝ , (∃ m. ⌜m⌝ < # nσ ∧ nσ[m] = n) ∧ (∀ m. (m ≠ 0 → (∃ m0. ⌜m0⌝ < # nσ ∧ nσ[m0] = m - 1)) → ¬ n + 1 < m) ↔ nσ[(# nσ).n - 1] = n |
# nσ = ⌜n0⌝ , stutf(nσ) ⊦ (∃ m. m < n0 ∧ nσ[m] = n) ∧ (∀ m. (m ≠ 0 → (∃ m0. m0 < n0 ∧ nσ[m0] = m - 1)) → ¬ n + 1 < m) ↔ nσ[n0 - 1] = n
Used simplifier rules: sel: ⊦ ⌜m⌝ .n = m; from specification nat-inf-basic%less-fin: ⊦ ⌜m⌝ < ⌜n⌝ ↔ m < n; from specification nat-inf