| stutf(nσ), ⌜m2⌝ + ⌜1⌝ < # nσ, n < nσ[m2 + 1], ∀ m0, nσ, n. m0 < m2 +1 → stutf(nσ) ∧ ⌜m0⌝ < # nσ ∧ n < nσ[m0] → nσ[m0] = 0 ∨ (∃ m1. m1 < m0 ∧ nσ[m1] = n ∧ nσ[m1 + 1] = nσ[m1] + 1) ⊦ nσ[m2 + 1] = 0, ¬ m2 < m2 ∧ nσ[m2] = n ∧ nσ[m2 + 1] = nσ[m2] + 1, ∃ m. ¬ m2 < m ∧ nσ[m] = n ∧ nσ[m + 1] = nσ[m] + 1 |
stutf(nσ), ⌜m2⌝ + ⌜1⌝ < # nσ, n < nσ[m2 + 1], ∀ m0, nσ, n. m0 < m2 +1 → stutf(nσ) ∧ ⌜m0⌝ < # nσ ∧ n < nσ[m0] → nσ[m0] = 0 ∨ (∃ m1. m1 < m0 ∧ nσ[m1] = n ∧ nσ[m1 + 1] = nσ[m1] + 1) ⊦ nσ[m2 + 1] = 0, ∃ m. ¬ m2 < m ∧ nσ[m] = n ∧ nσ[m + 1] = nσ[m] + 1, nσ[m2] = n ∧ nσ[m2 + 1] = nσ[m2] + 1
Used simplifier rules: ref-1: ⊦ ¬ n < n; from specification nat-basic1