| m < n, datasize(buf, n) < datasize(buf, m), m < # buf, n ≤ # buf ⊦ |
m < # buf, datasize(buf, n0 +1) < datasize(buf, m), m < n0 +1, n0 +1 ≤ # buf, ∀ m, buf. ¬(m < n0 ∧ datasize(buf, n0) < datasize(buf, m) ∧ m < # buf ∧ n0 ≤ # buf) ⊦
Used simplifier rules: nat freely generated by 0, +1;;% ⊦ 0 ≤ m; (s)% ⊦ ¬ m < 0; (s)