| m ≤ # buf1, ∀ n. # buf0 ≤ n ∧ n < # buf0 + m → (buf0 + buf1)[n] = empty ⊦ ∀ n. n < m → buf1[n] = empty |
n < m, n < # buf1, m ≤ # buf1, ∀ n. # buf0 ≤ n ∧ n < # buf0 + m → (buf0 + buf1)[n] = empty ⊦ buf1[n] = empty
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%fle: ⊦ m < n ∧ n ≤ n0 → m < n0; (forward) from specification nat%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic