| (∃ m. ¬ m1 < m ∧ nσ[m] = n) ∧ (∀ m. (m ≠ 0 → (∃ m0. ¬ m1 < m0 ∧ nσ[m0] = m - 1)) → ¬ n + 1 < m), # nσ = ⌜m1⌝ + ⌜1⌝ , stutf(nσ) ⊦ nσ[m1] = n |
# nσ = ⌜m1⌝ + ⌜1⌝ , stutf(nσ), m ≤ m1, ∀ m0. (m0 ≠ 0 → (∃ m2. ¬ m1 < m2 ∧ nσ[m2] = m0 - 1)) → ¬ nσ[m] + 1 < m0 ⊦ nσ[m1] = nσ[m]
Used simplifier rules: lels: ⊦ ¬ m < n ↔ n ≤ m; from specification nat