| ∀ t0. #(t0) < #(t) → (¬ hasS(t0) → 〈RED1(t0; tn)〉 (tn ≠ none → ¬ hasS(tn) ∧ #(tn) < #(t0))), ap(t), ¬ hasS(t), ¬ (ap(t1) ∧ t1 .1 = K ∧ value(t1 .2) ∧ value(t2)), ¬ (ap(t1) ∧ ap(t1 .1) ∧ t1 .1 .1 = S), t = t1 _ t2 ⊦ 〈RED1(t1; tn)〉 〈if tn ≠ none then tn := some(tn .t _ t2) else if value(t1) then { RED1(t2; tn) ; if tn ≠ none then tn := some(t1 _ tn .t) }〉 (tn ≠ none → ¬ hasS(tn) ∧ #(tn) < #(t)) |
∀ t0. #(t0) < #(t1 _ t2) → (¬ hasS(t0) → 〈RED1(t0; tn)〉 (tn ≠ none → ¬ hasS(tn) ∧ #(tn) < #(t0))), ¬ hasS(t1), ¬ hasS(t2), ¬ (ap(t1) ∧ t1 .1 = K ∧ value(t1 .2) ∧ value(t2)), ¬ (ap(t1) ∧ ap(t1 .1) ∧ t1 .1 .1 = S) ⊦ 〈RED1(t1; tn)〉 〈if tn ≠ none then tn := some(tn .t _ t2) else if value(t1) then { RED1(t2; tn) ; if tn ≠ none then tn := some(t1 _ tn .t) }〉 (tn ≠ none → ¬ hasS(tn) ∧ ¬ #(t1) + #(t2) < #(tn))
[[CONCRETESIMPRULES : ([CSIMPSEQ : ⊦ m + n = n + m], [CSIMPSEQ : ⊦ (m + n0) + n1 = m + n0 + n1], [CSIMPSEQ : ⊦ m < n + 1 ↔ ¬ n < m], [CSIMPSEQ : ⊦ m +1 = m + 1], [CSIMPSEQ : ⊦ #(t _ t0) = (#(t) + #(t0)) +1], [CSIMPSEQ : ⊦ hasS(t _ t0) ↔ hasS(t) ∨ hasS(t0)], [CSIMPSEQ : ⊦ ap(t _ t0)])]]