[Imprint]
[Data Privacy Statement]
[E-Mail]
View
long theorem info
. View
the proof
. Back to
main index
. View
the specification
. View
theorem base summary
, View
theorem base listing
, the
used properties by spec
, the
dependency list
, the
symbol table
,
Theorem inv-inverts
⊦ stutf(nσ) ∧ nσ[n + 1] = nσ[n] + 1 ∧ ⌜n⌝ + ⌜1⌝ < # nσ → inv(nσ)[nσ[n]] = n
Type: A user defined theorem
Validity: The proof is valid.
Features: s, ls,
Comment:
Used by:
Used by units in proved state:
Proof exists?: Yes
View
the proof
Infos about the proof
Proved?: Yes
Interactions: 23
Proof steps: 51
Used lemmas:
maxinf-fin
,
maxinf-inf
,
stutf-nonempty
,
stutf-monle
,
monle-leq
,
leninv-succ
,
leninv-zero
,
leninv-inf-strong
,
inv-def
,
Used spec theorems:
nat-inf
/
notinf-fin
Used simplifier rules:
stream
/natstream/
to-inf
stream
/natstream/
sel-inf
nat-inf
/
less-inf2
nat-inf
/
sel-rqui-dotn
stream
/natstream/
sel-fin
nat-inf
/
elim-rqui
nat-inf
/
disj-rqui-infty
stream
/natstream/
to-zero-nf
stream
/natstream/
size-inf
nat-basic
/
a
nat-basic
/
c
nat-basic
/
succ
nat-inf
/
add-fin
nat-inf
/
add-comm
nat-inf
/
add-assoc
nat-inf
/
addeqinf-cancel
nat-inf
/
inf-less
nat-basic
/
f
nat-basic
/
s-04
nat-basic
/
ls-02
nat-basic
/
eqs
nat-basic
/
eq-02
nat
/
le-ls-simp
nat
/
lels
nat-basic
/
eq-01
nat
/
anti
nat-basic
/
refl-nat
stream
/natstream/
get-infto
nat
/
lels-03
nat-inf
/
ls-natinf-to-nat-2-1
nat-inf
/
less-fin
nat-basic
/
less-zero
stream
/natstream/
size-empty-equiv
nat
/
elim-pred-c
nat-basic
/
l
nat-basic
/
oz
nat-inf
/
inf-inseq-reduce
nat
/
succ-01
nat-basic
/
nls-fst
nat-inf
/
lsle-trans
nat-basic
/
l-02
nat-inf
/
inj-rqui
nat-basic
/
neq-01