| ⌜n⌝ < # nσ, stutf(nσ), ∃ n0. leninv(nσ) = ⌜n0⌝ ∧ ⌜n0⌝ < ⌜nσ[n]⌝ ⊦ |
leninv(nσ) = ⌜n0⌝ , ⌜n⌝ < # nσ, stutf(nσ), n0 < nσ[n] ⊦ nσ[n] = 0
Used simplifier rules: f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic1%less-fin: ⊦ ⌜m⌝ < ⌜n⌝ ↔ m < n; from specification nat-inf