| mon<(nσ), nσ[0] ≤ n, n < nσ[m], ⌜m⌝ < # nσ ⊦ ∃ m0. nσ[m0] ≤ n ∧ n < nσ[m0 + 1] ∧ m0 ≤ m |
∀ nσ, n. mon<(nσ) ∧ nσ[0] ≤ n ∧ n < nσ[m0] ∧ ⌜m0⌝ < # nσ → (∃ m1. nσ[m1] ≤ n ∧ n < nσ[m1 + 1] ∧ m1 ≤ m0), mon<(nσ), nσ[0] ≤ n, n < nσ[m0 +1], ⌜m0 +1⌝ < # nσ ⊦ ∃ m1. nσ[m1] ≤ n ∧ n < nσ[m1 + 1] ∧ m1 ≤ m0 +1
Used simplifier rules: nat freely generated by 0, +1;;%ls-le-simp: ⊦ m < n → (n ≤ m ↔ false); from specification nat