| ⌜m0⌝ = leninv(nσ), n < nσ[m], ⌜m⌝ < # nσ, stutf(nσ) ⊦ ⌜n⌝ < leninv(nσ) |
⌜m0⌝ = leninv(nσ), stutf(nσ), ⌜m⌝ < # nσ, n < nσ[m], m0 ≤ n, m0 < nσ[m] ⊦
Used simplifier rules: fle-01: ⊦ m ≤ n ∧ n < n0 → m < n0; (forward) from specification nat%lels: ⊦ ¬ m < n ↔ n ≤ m; from specification nat%less-fin: ⊦ ⌜m⌝ < ⌜n⌝ ↔ m < n; from specification nat-inf