| is-encoded(nx, buf) ⊦ # buf = # nx * EB_PAGE_SIZE |
is-encoded(m + nx0, buf), ∀ buf. is-encoded(nx0, buf) → # buf = # nx0 * EB_PAGE_SIZE ⊦ # buf = #(m + nx0) * EB_PAGE_SIZE
Used simplifier rules: is-encoded-base: ⊦ is-encoded([], buf) ↔ buf = mkbuf(0);%nat-list freely generated by [], +;;% ⊦ # [] = 0; (s)% ⊦ 0 * n = 0; (s)%mult-a: ⊦ m0 * m * n = (m0 * m) * n; from specification nat-mult%mult-c: ⊦ m * n = n * m; from specification nat-mult% ⊦ # mkbuf(n) = n; (s)