| i ≤ max(i ' + ints), max(ints) ≤ max(i ' + ints), ∀ i0. i0 ∈ ints → i0 ≤ max(i ' + ints), i ∈ ints → i ≤ max(ints), ∀ i. i ∈ ints → i ≤ max(ints) ⊦ ints = [], max(i ' + ints) = max(i, max(ints)), max(i ' + ints) ∈ ints |
max(i ' + ints) ∈ i ' + ints, i ≤ max(i ' + ints), max(ints) ≤ max(i ' + ints), ∀ i0. i0 ∈ ints → i0 ≤ max(i ' + ints), i ∈ ints → i ≤ max(ints), ∀ i. i ∈ ints → i ≤ max(ints) ⊦ ints = [], max(i ' + ints) = max(i, max(ints)), max(i ' + ints) ∈ ints
Used simplifier rules: max-in-01: ⊦ max(ints) ∈ ints ↔ ints ≠ [];%e-01: ⊦ i ' + ints ≠ []; from specification list[intlista]%a: ⊦ (ints + ints0) + ints1 = ints + ints0 + ints1; from specification list[intlista] Used formulas: max(i ' + ints) ∈ i ' + ints