| ¬ ¬ i0 < max(ints0), i < max(i0, max(ints0)), ∀ i. i < max(ints0) → max(ints0 -1l i) = max(ints0) ⊦ max(i0, max(ints0 -1l i)) = max(i0, max(ints0)), i = i0, ints0 = [], ints0 = i ' |
i0 < max(ints0), i < max(ints0), ∀ i. i < max(ints0) → max(ints0 -1l i) = max(ints0) ⊦ i = i0, ints0 = [], ints0 = i ', max(i0, max(ints0 -1l i)) = max(ints0)
Used simplifier rules: max-c: ⊦ max(i, j) = max(j, i); from specification int-min%max-a: ⊦ max(i, max(j, j0)) = max(max(i, j), j0); from specification int-min%Max-right: ⊦ j < i → max(j, i) = i; from specification int-min