| buf0 + buf1 = buf2 + buf3, is-encoded(a, buf0) ⊦ is-encoded(b, buf2) ↔ # buf0 = # buf2 ∧ a = b, # buf0 ≤ # buf2 |
buf0 + buf1 = buf2 + buf3, # buf2 < # buf0, is-encoded(a, buf0) ⊦ is-encoded(b, buf2) ↔ # buf0 = # buf2 ∧ a = b
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic% ⊦ m ≤ n ↔ ¬ n < m; (ss)