| # lpt = # avol, m = m1, m0 = m2, m2 < # avol, ebm-vol-inv(avol) ⊦ ∃ err0. ⌊err0⌋ ∨ err0 = ESUCCESS |
# lpt = # avol, m2 < # avol, ebm-vol-inv(avol) ⊦ ∃ err0. ⌊err0⌋ ∨ err0 = ESUCCESS
Used simplifier rules: lf-01: ⊦ m < n ∧ n = n0 → m < n0; (forward) from specification nat-basic