| m < n, CInv(n, act0, cs0), CRelyto(m, act, cs, act0, cs0), CInv(n, act, cs), CInitto(m, act, cs) ⊦ n = 0, ∀ m0. m0 ≤ m → CInit(m0, act0, cs0) |
m0 ≤ m, m < n, CInv(n, act0, cs0), CRelyto(m, act, cs, act0, cs0), CInv(n, act, cs), CInitto(m, act, cs), m0 < n ⊦ n = 0, CInit(m0, act0, cs0)
Used simplifier rules: fle-01: ⊦ m ≤ n ∧ n < n0 → m < n0; (forward) from specification nat