| i ≤ i2 + i, ∀ j0, i1, i0. i→n(j0 - i1) < i→n(i2) → true → (i0 ∈ count-i2j(i1, j0) ↔ i1 ≤ i0 ∧ i0 ≤ j0) ⊦ i0 ∈ count-i2j(i, i2 + i - 1) + (i2 + i) ↔ i ≤ i0 ∧ i0 ≤ i2 + i |
0 ≤ i2, ∀ j0, i1, i0. i→n(j0 - i1) < i→n(i2) → true → (i0 ∈ count-i2j(i1, j0) ↔ i1 ≤ i0 ∧ i0 ≤ j0) ⊦ i0 ∈ count-i2j(i, i2 + i - 1) ∨ i0 = i2 + i ↔ i ≤ i0 ∧ i0 ≤ i2 + i
Used simplifier rules: forward-le-01: ⊦ i ≤ j ∧ 0 ≤ i → 0 ≤ j; (forward) from specification int-abs%add-c: ⊦ i + j = j + i; from specification int-basic2%add-a: ⊦ i + j + i0 = (i + j) + i0; from specification int-basic2%lep: ⊦ i ≤ i + j ↔ 0 ≤ j; from specification int-abs%a: ⊦ (ints + ints0) + ints1 = ints + ints0 + ints1; from specification list[intlista]%in-17: ⊦ i ∈ i0 ' ↔ i = i0; from specification list[intlista]%in-append: ⊦ i ∈ ints + ints0 ↔ ¬ ¬(i ∈ ints ∨ i ∈ ints0); from specification list[intlista]%Last: ⊦ ints + i = ints + i '; from specification list[intlista]