| mon<(⌜nnf⌝ ) ⊦ ∀ n0. ⌜n0⌝ + ⌜1⌝ < # ⌜nnf from n⌝ → ⌜nnf from n⌝ [n0] < ⌜nnf from n⌝ [n0 + 1] |
mon<(⌜nnf⌝ ), nnf((n0 + 1) + n) ≤ nnf(n0 + n) ⊦
Used simplifier rules: lels: ⊦ ¬ m < n ↔ n ≤ m; from specification nat%get-from-inf: ⊦ ((nnf from n))(m) = nnf(m + n); from specification stream[natstream]%sel-inf: ⊦ ⌜nnf⌝ [n] = nnf(n); from specification stream[natstream]%add-comm: ⊦ n∞1 + n∞2 = n∞2 + n∞1; from specification nat-inf%add-assoc: ⊦ (n∞ + n∞1) + n∞2 = n∞ + n∞1 + n∞2; from specification nat-inf%disj: ⊦ ⌜m⌝ ≠ ∞; from specification nat-inf-basic%addeqinf-cancel: ⊦ ⌜m⌝ + n∞ = ∞ ↔ n∞ = ∞; from specification nat-inf%inf-less: ⊦ n∞ < ∞ ↔ n∞ ≠ ∞; from specification nat-inf%size-inf: ⊦ # ⌜nnf⌝ = ∞; from specification stream[natstream]