| pebs0 = pebs, m < # pebs, mtd-cons(pebs) ⊦ ⟨mtd_asm_markbad#(m; pebs; err)⟩ (pebs0 = pebs), pebs[m].bad |
pebs0 = pebs, m < # pebs, mtd-cons(pebs), ¬ pebs[m].bad ⊦ ⟨mtd_asm_markbad#(m; pebs; err)⟩ (pebs0 = pebs)
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic