| mon<(⌜nl⌝ ), ∀ nl0, np. # nl0 < # nl → mon<(⌜nl0⌝ ) → mon<(rem(⌜nl0⌝ , np)) ⊦ ∀ nl0, m. nl ≠ nl0 + m ', mon<(rem(⌜nl⌝ , np)) |
mon<(⌜nl0⌝ + ⌜m '⌝ ), ∀ nl1, np. # nl1 < #(nl0 + m ') → mon<(⌜nl1⌝ ) → mon<(rem(⌜nl1⌝ , np)) ⊦ mon<(rem(⌜nl0⌝ , np) + (np(# nl0) ⊃ [];⌜m '⌝ ))
Used simplifier rules: append-assoc: ⊦ (nσ + nσ0) + nσ1 = nσ + nσ0 + nσ1; from specification stream[natstream]%rem-rec: ⊦ rem(⌜nl⌝ + ⌜m '⌝ , np) = rem(⌜nl⌝ , np) + (np(# nl) ⊃ [];⌜m '⌝ ); from specification mon-lim-filter-count[natstream]%a: ⊦ (nl + nl0) + nl1 = nl + nl0 + nl1; from specification list[natstream]%append-finfin: ⊦ ⌜nl + nl0⌝ = ⌜nl⌝ + ⌜nl0⌝ ; from specification stream[natstream]