| n < nused, nused ≤ BRANCH_SIZE ⊦ load(brar, 0, nused)[n] = load(brar[n]) |
n < nused, n < BRANCH_SIZE, nused ≤ BRANCH_SIZE ⊦ load(brar, 0, nused)[n] = load(brar[n])
Used simplifier rules: ⊦ BRANCH_SIZE ≠ 0; (s)% ⊦ m < n → n ≠ 0; (s)%fle: ⊦ m < n ∧ n ≤ n0 → m < n0; (forward) from specification nat%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic