| i + ints ≠ [] → min(i + ints) ∈ i + ints ∧ (∀ i0. i0 ∈ i + ints → min(i + ints) ≤ i0) ⊦ ints = [], min(i ' + ints) = min(i, min(ints)) |
∀ i0. i0 = i ∨ i0 ∈ ints → min(i ' + ints) ≤ i0 ⊦ ints = [], min(i ' + ints) = min(i, min(ints))
Used simplifier rules: min-in: ⊦ min(ints) ∈ ints ↔ ints ≠ [];%in-17: ⊦ i ∈ i0 ' ↔ i = i0; from specification list[intlista]%in-append: ⊦ i ∈ ints + ints0 ↔ ¬ ¬(i ∈ ints ∨ i ∈ ints0); from specification list[intlista]%a: ⊦ (ints + ints0) + ints1 = ints + ints0 + ints1; from specification list[intlista]%e-01: ⊦ i ' + ints ≠ []; from specification list[intlista]%c: ⊦ i + ints = i ' + ints; from specification list[intlista]