| m ≤ # buf0 ⊦ datasize(buf0 + buf1, m) = datasize(buf0, m) |
⊦ datasize(buf, 0) = 0
m0 +1 ≤ # buf0, ∀ buf0, buf1. m0 ≤ # buf0 → datasize(buf0 + buf1, m0) = datasize(buf0, m0) ⊦ datasize(buf0 + buf1, m0 +1) = datasize(buf0, m0 +1)
Used simplifier rules: datasize-base: ⊦ datasize(buf, 0) = 0;%nat freely generated by 0, +1;;