| 1 + # ints1 = # ints0, Σ ints0 < i + Σ ints1, ∀ ints. (∀ n. n < # ints1 → ints1[n] ≤ ints[n]) ∧ # ints1 = # ints → Σ ints1 ≤ Σ ints, ∀ n. ¬ # ints1 < n → (i ' + ints1)[n] ≤ ints0[n] ⊦ |
⊦ ints ≠ [] → Σ ints = ints.first + Σ ints.rest
ints0 ≠ [], 1 + # ints1 = # ints0, ints0.first + Σ ints0.rest < i + Σ ints1, ∀ ints. (∀ n. n < # ints1 → ints1[n] ≤ ints[n]) ∧ # ints1 = # ints → Σ ints1 ≤ Σ ints, ∀ n. ¬ # ints1 < n → (i ' + ints1)[n] ≤ ints0[n] ⊦
Used simplifier rules: size-01: ⊦ # [] = 0; from specification list-data[intlista]%oz: ⊦ m + 1 ≠ 0; from specification nat-basic2%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic2%c: ⊦ m + n = n + m; from specification nat-basic2 Used terms: ints0