| ¬ ¬ i0 < max(ints0 -1l i), i0 < max(i0, max(ints0 -1l i)), max(ints0) < max(i0, max(ints0 -1l i)), ∀ i1. max(ints0) < max(ints0 -1l i1) → ints0 = i1 ' ∧ i1 < 0 ⊦ i = i0, i0 ' + ints0 = i ', ints0 = [], ints0 = i ' |
i0 < max(ints0 -1l i), max(ints0) < max(ints0 -1l i), ∀ i1. max(ints0) < max(ints0 -1l i1) → ints0 = i1 ' ∧ i1 < 0 ⊦ i = i0, i0 ' + ints0 = i ', ints0 = [], ints0 = i '
Used simplifier rules: max-c: ⊦ max(i, j) = max(j, i); from specification int-min%max-a: ⊦ max(i, max(j, j0)) = max(max(i, j), j0); from specification int-min%Max-right: ⊦ j < i → max(j, i) = i; from specification int-min