| buf[n0 + n] = empty, n0 + n < # buf, ∀ n1. ¬ n < n1 → subarray(buf, n0, n + 1)[n1] = mkempbuf(n + 1)[n1] ⊦ datasize(buf, n0 + n) = datasize(buf, n0), # subarray(buf, n0, n) = # mkempbuf(n) ∧ (∀ n1. n1 < # subarray(buf, n0, n) → subarray(buf, n0, n)[n1] = mkempbuf(n)[n1]) |
buf[n0 + n] = empty, n1 < n, n0 + n < # buf, ∀ n1. ¬ n < n1 → subarray(buf, n0, n + 1)[n1] = mkempbuf(n + 1)[n1] ⊦ buf[n0 + n1] = empty, datasize(buf, n0 + n) = datasize(buf, n0)
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic% ⊦ m < n → mkempbuf(n)[m] = empty; (s)% ⊦ n0 < n → subarray(buf, m, n)[n0] = buf[m + n0]; (s)% ⊦ # mkempbuf(n) = n; (s)% ⊦ # subarray(buf, m, n) = n; (s)