| # nσ = ∞ ∨ nσ[n] < nσ[(# nσ).n - 1], ⌜min(nσ, nσ[n] + 1)⌝ < # nσ ∧ nσ[n] < nσ[min(nσ, nσ[n] + 1)] ∧ (∀ m. ⌜m⌝ < # nσ ∧ nσ[n] < nσ[m] → min(nσ, nσ[n] + 1) ≤ m), ⌜n⌝ < # nσ, mon<(nσ) ⊦ min(nσ, nσ[n] + 1) = n + 1, nσ = [] |
⌜min(nσ, nσ[n] + 1)⌝ < # nσ, nσ[n] < nσ[min(nσ, nσ[n] + 1)], ⌜n⌝ < # nσ, mon<(nσ), # nσ = ∞ ∨ nσ[n] < nσ[(# nσ).n - 1], ∀ m. ⌜m⌝ < # nσ ∧ nσ[n] < nσ[m] → min(nσ, nσ[n] + 1) ≤ m ⊦ min(nσ, nσ[n] + 1) = n + 1, nσ = [], nσ[min(nσ, nσ[n] + 1)] = 0
Used simplifier rules: f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic1