| n < n2, n < n1 + # buf, n2 ≤ n1 + # buf ⊦ (n < n1 ⊃ mkempbuf(n0 + n1)[n0 + n];buf[n - n1]) = (n < n1 ⊃ empty;buf[n - n1]) |
⊦ m < n → mkempbuf(n)[m] = empty
Used simplifier rules: ⊦ m + n < m + n0 ↔ n < n0; (s)% ⊦ m < n ↔ ¬ n ≤ m; (ss)%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic%c: ⊦ m + n = n + m; from specification nat-basic% ⊦ m ≤ n → (n < m ↔ false); (s) Used terms: n0 + n, n0 + n1