nnf(0) = 0, mon<(⌜nnf⌝ ), nnf(n + 1) ≤ n ⊦
Used simplifier rules: lels: ⊦ ¬ m < n ↔ n ≤ m; from specification nat