| ⊦ ⟪decode_aligned#(n, buf, ENCODED_ELEM_ALIGNMENT; a, n0; err)⟫ ( (err = ESUCCESS ∨ ⌊err⌋ ) ∧ ( err = ESUCCESS → is-encoded-aligned(a, subarray(buf, n, size-aligned(a, ENCODED_ELEM_ALIGNMENT))) ∧ n + size-aligned(a, ENCODED_ELEM_ALIGNMENT) ≤ # buf ∧ n0 = size-aligned(a, ENCODED_ELEM_ALIGNMENT))) |