| ¬ i < max(ints1), max(ints1) = max(ints0 -1l i), i ∈ ints0, perm(ints1, ints0 -1l i) ⊦ ints1 = [], i = max(ints0) |
max(ints1) = max(ints0 -1l i), i ∈ ints0, perm(ints1, ints0 -1l i), max(ints1) ≤ i ⊦ ints1 = [], i = max(ints0)
Used simplifier rules: lels: ⊦ ¬ i < j ↔ j ≤ i; from specification int-abs