| n0 + n < # buf, isempty(buf, n0, n), ∀ n2. n0 ≤ n2 ∧ n2 < n0 + n → buf[n2] = empty, ∀ n1. n0 ≤ n1 ∧ ¬ n0 + n < n1 → buf[n1] = empty ⊦ buf[n0 + n] = empty |
Used simplifier rules: ⊦ m ≤ m + n; (s)%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic%c: ⊦ m + n = n + m; from specification nat-basic% ⊦ m + n < m + n0 ↔ n < n0; (s)% ⊦ ¬ n < n; (s) Used terms: n0 + n