| # subarray(buf0, 0, n * ENCODED_LPROPS_SIZE) = # subarray(buf1, 0, n * ENCODED_LPROPS_SIZE), # buf1 = align↑(# lpt * ENCODED_LPROPS_SIZE, LEB_SIZE), # buf0 = # buf1, n < # lpt, m < # lpt, n0 < ENCODED_LPROPS_SIZE, is-encoded(lpt[m], subarray(buf0, m * ENCODED_LPROPS_SIZE, ENCODED_LPROPS_SIZE)), is-encoded(lpt[n], subarray(buf1, n * ENCODED_LPROPS_SIZE, ENCODED_LPROPS_SIZE)), n * ENCODED_LPROPS_SIZE + ENCODED_LPROPS_SIZE ≤ # buf1, m ≤ n, ∀ n0. n0 < # subarray(buf0, 0, n * ENCODED_LPROPS_SIZE) → subarray(buf0, 0, n * ENCODED_LPROPS_SIZE)[n0] = subarray(buf1, 0, n * ENCODED_LPROPS_SIZE)[n0] ⊦ buf1[m * ENCODED_LPROPS_SIZE + n0] = buf0[m * ENCODED_LPROPS_SIZE + n0], is-encoded(lpt[m], subarray(buf1, m * ENCODED_LPROPS_SIZE, ENCODED_LPROPS_SIZE)) |
# buf0 = # buf1, # buf1 = align↑(# lpt * ENCODED_LPROPS_SIZE, LEB_SIZE), n0 < ENCODED_LPROPS_SIZE, m < # lpt, n < # lpt, is-encoded(lpt[n], subarray(buf1, n * ENCODED_LPROPS_SIZE, ENCODED_LPROPS_SIZE)), is-encoded(lpt[m], subarray(buf0, m * ENCODED_LPROPS_SIZE, ENCODED_LPROPS_SIZE)), m ≤ n, n * ENCODED_LPROPS_SIZE + ENCODED_LPROPS_SIZE ≤ # buf1, ∀ n1. n1 < n * ENCODED_LPROPS_SIZE → buf0[n1] = buf1[n1] ⊦ buf1[m * ENCODED_LPROPS_SIZE + n0] = buf0[m * ENCODED_LPROPS_SIZE + n0], is-encoded(lpt[m], subarray(buf1, m * ENCODED_LPROPS_SIZE, ENCODED_LPROPS_SIZE))
Used simplifier rules: c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ n + 0 = n; (s)% ⊦ n0 < n → subarray(buf, m, n)[n0] = buf[m + n0]; (s)% ⊦ # subarray(buf, m, n) = n; (s)