| 0 < i1, 0 ≤ i1, 0 ≤ i2, ∀ i0, j. i→n(i0) < i→n(i1 + 1) → 0 < i0 ∧ 0 < j → (fac(i0) ≤ fac(j) ↔ i0 ≤ j) ⊦ 0 < i1 ∧ 0 < i2, (i1 + 1) * fac(i1) ≤ (i2 + 1) * fac(i2) ↔ i1 ≤ i2 |
0 ≤ i1, 0 < i1, (i1 + 1) * fac(i1) ≤ 1, ∀ i0, j. i→n(i0) < i→n(i1 + 1) → 0 < i0 ∧ 0 < j → (fac(i0) ≤ fac(j) ↔ i0 ≤ j) ⊦
Used simplifier rules: fac-zero: ⊦ i ≤ 0 → fac(i) = 1;%commutativity: ⊦ i * j = j * i; from specification int-mult%associativity: ⊦ i * j * j0 = (i * j) * j0; from specification int-mult%add-c: ⊦ i + j = j + i; from specification int-basic2%add-a: ⊦ i + j + i0 = (i + j) + i0; from specification int-basic2%lels-01: ⊦ ¬ i ≤ j ↔ j < i; from specification int-abs%lenls: ⊦ i ≤ j → ¬ j < i; from specification int-abs%forward-le-05: ⊦ i < j ∧ 0 ≤ i → 0 < j; (forward) from specification int-abs%forward-lsle: ⊦ i < j ∧ j ≤ j0 → i < j0; (forward) from specification int-abs%lel: ⊦ i < i0 ∧ i = i1 → i1 < i0; (forward) from specification oelem[intlista]%anti: ⊦ i ≤ j → (j ≤ i ↔ i = j); from specification int-abs%lels: ⊦ ¬ i < j ↔ j ≤ i; from specification int-abs