| # buf0 = EB_PAGE_SIZE, buf + emptypage + buf1 = buf0 + buf2, is-aligned(# buf, EB_PAGE_SIZE), is-encoded(nx0, buf2), is-encoded(rnode(m), buf0), # buf ≠ 0 → buf = buf3 + buf4 ∧ # buf3 = EB_PAGE_SIZE, ∀ buf3, buf4. ¬ is-aligned(# buf3, EB_PAGE_SIZE) ∨ ¬ is-encoded(nx0, buf3 + emptypage + buf4) ⊦ EB_PAGE_SIZE ≤ # buf |
# buf = 0, # buf0 = EB_PAGE_SIZE, emptypage + buf1 = buf0 + buf2, is-encoded(nx0, buf2), is-encoded(rnode(m), buf0), ∀ buf3, buf4. ¬ is-aligned(# buf3, EB_PAGE_SIZE) ∨ ¬ is-encoded(nx0, buf3 + emptypage + buf4) ⊦
Used simplifier rules: n ≠ 0 ⊦ is-aligned(0, n); (s)%append-a: ⊦ (buf + buf0) + buf1 = buf + buf0 + buf1; from specification array-splice[buffer]% ⊦ # buf = 0 → buf + buf0 = buf0; (s)%m ≠ 0 ⊦ is-aligned(n, m) → (n < m ↔ n = 0); (s)% ⊦ EB_PAGE_SIZE ≠ 0; (s)% ⊦ m ≤ n ↔ ¬ n < m; (ss)