| # buf1 = n2 + n1 + m, n0 + m ≤ # buf0 ⊦ ⌜n2⌝ + ⌜m⌝ = ⌜m⌝ + #(⌜buf1⌝ from n1 + m), #(⌜buf0⌝ from n0) < ⌜m⌝ |
# buf1 = n2 + n1 + m, n0 + m ≤ # buf0 ⊦ ⌜n2⌝ = #(⌜buf1⌝ from n1 + m), #(⌜buf0⌝ from n0) < ⌜m⌝
Used simplifier rules: add-comm: ⊦ n∞1 + n∞2 = n∞2 + n∞1; from specification nat-inf%add-assoc: ⊦ (n∞ + n∞1) + n∞2 = n∞ + n∞1 + n∞2; from specification nat-inf% ⊦ ⌜n⌝ + n∞1 = ⌜n⌝ + n∞2 ↔ n∞1 = n∞2; (s)