| ⊦ stutf(nσ) ∧ ⌜m⌝ < # nσ ∧ n < nσ[m] → (¬ ⌜n⌝ < leninv(nσ) ↔ false) |
n < nσ[m], ⌜m⌝ < # nσ, stutf(nσ) ⊦ ⌜n⌝ < leninv(nσ)
Used simplifier rules: f: ⊦ m < n → n ≠ 0; from specification nat-basic1%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic1