| ¬ i ≠ i0, i < max(i0 ' + ints0), ∀ i. i < max(ints0) → max(ints0 -1l i) = max(ints0) ⊦ max((i0 ' + ints0) -1l i) = max(i0 ' + ints0) |
i0 < max(i0 ' + ints0), ∀ i. i < max(ints0) → max(ints0 -1l i) = max(ints0) ⊦ max(ints0) = max(i0 ' + ints0)
Used simplifier rules: a: ⊦ (ints + ints0) + ints1 = ints + ints0 + ints1; from specification list[intlista]%del1-y: ⊦ (i ' + ints) -1l i = ints; from specification list-del[intlista]