| 0 + # buf1 ≤ # buf1 ⊦ (∀ n. n < # buf0 + # buf1 → (buf0 + buf1)[n] = empty) ↔ (∀ n. n < # buf0 → buf0[n] = empty) ∧ (∀ n. 0 ≤ n ∧ n < 0 + # buf1 → buf1[n] = empty) |
⊦ (∀ n. n < # buf0 + # buf1 → (buf0 + buf1)[n] = empty) ↔ (∀ n. n < # buf0 → buf0[n] = empty) ∧ (∀ n. n < # buf1 → buf1[n] = empty)
Used simplifier rules: ⊦ m ≤ m; (s)%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ n + 0 = n; (s)% ⊦ 0 ≤ m; (s)