| m1 ≤ n, nσ[m1] ≤ nσ[n], stutf(nσ), ⌜n⌝ < # nσ, ⌜nσ[m1]⌝ < # nσ ∧ nσ[m1] ≤ nσ[nσ[m1]] → m0 ≤ nσ[m0] ∧ nσ[m0] = nσ[m1], ∀ n. ¬ ⌜n⌝ < # nσ ∨ nσ[n] ≠ nσ[m1] ⊦ # nσ = ∞ ∧ (∃ n. ∀ n0. ¬ n0 < n → nσ[n0] = nσ[m1]) |
Used simplifier rules: lsle-trans: ⊦ n∞ < n∞1 ∧ ¬ n∞2 < n∞1 → n∞ < n∞2; (forward) from specification nat-inf%less-fin: ⊦ ⌜m⌝ < ⌜n⌝ ↔ m < n; from specification nat-inf%le-ls-simp: ⊦ m ≤ n → (n < m ↔ false); from specification nat Used terms: m1