| ¬ ints0 -1l i ≠ [], i < max(i0 ' + ints0), ∀ i. i < max(ints0) → max(ints0 -1l i) = max(ints0) ⊦ i = i0, max(i0 ' + (ints0 -1l i)) = max(i0 ' + ints0) |
ints0 -1l i = [], i < max(i0 ' + ints0), ∀ i. i < max(ints0) → max(ints0 -1l i) = max(ints0) ⊦ i = i0, i0 = max(i0 ' + ints0)
Used simplifier rules: max-one: ⊦ max(i ') = i;%a: ⊦ (ints + ints0) + ints1 = ints + ints0 + ints1; from specification list[intlista]%app: ⊦ ints + [] = ints; from specification list[intlista]