| 0 ≤ j, j < n→i(# ints), ∀ i. i ∈ ints → 0 ≤ i ∧ i < j, ∀ j0, ints. i→n(j0) < i→n(j) → (∀ i. i ∈ ints → 0 ≤ i ∧ i < j0) ∧ 0 ≤ j0 ∧ j0 < n→i(# ints) → dups(ints) ⊦ (∀ i. i ∈ ints → 0 ≤ i ∧ i < j - 1) ∧ 0 ≤ j - 1 ∧ j - 1 < n→i(# ints), ints = [], dups(ints) |
j ≤ n→i(# ints), j < n→i(# ints), 0 ≤ j, ∀ i. i ∈ ints → 0 ≤ i ∧ i < j, ∀ j0, ints. i→n(j0) < i→n(j) → (∀ i. i ∈ ints → 0 ≤ i ∧ i < j0) ∧ 0 ≤ j0 ∧ j0 < n→i(# ints) → dups(ints) ⊦ ints = [], dups(ints), 0 < j ∧ (i ∈ ints → 0 ≤ i ∧ i + 1 < j)
Used simplifier rules: nat2int: ⊦ 0 ≤ n→i(n); from specification intnat%forward-le-01: ⊦ i ≤ j ∧ 0 ≤ i → 0 ≤ j; (forward) from specification int-abs%ls-01: ⊦ i < j → ¬ j < i; from specification int-basic1%lels-01: ⊦ ¬ i ≤ j ↔ j < i; from specification int-abs%succ-02: ⊦ i < j + 1 ↔ i ≤ j; from specification int-abs%sub-ls: ⊦ i - j < i0 ↔ i < j + i0; from specification int-abs%leone: ⊦ 1 ≤ i ↔ 0 < i; from specification int-abs%add-c: ⊦ i + j = j + i; from specification int-basic2%add-a: ⊦ i + j + i0 = (i + j) + i0; from specification int-basic2%sub-le-01: ⊦ i ≤ j - i0 ↔ i + i0 ≤ j; from specification int-abs%sub-ls-01: ⊦ i < j - i0 ↔ i + i0 < j; from specification int-abs