| n < # buf0 + # buf1, n < # buf0, ∀ n. n < # buf1 → buf1[n] = empty, ∀ n. n < # buf0 → buf0[n] = empty ⊦ buf0[n] = empty |
n < # buf0 + # buf1, n < # buf0, ∀ n. n < # buf1 → buf1[n] = empty, ∀ n. n < # buf0 → buf0[n] = empty ⊦ buf0[n] = empty
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic