| # ns = m + 1, # buf1 = ENCODED_NAT_SIZE, # buf2 = ENCODED_NAT_SIZE, # buf = m * ENCODED_NAT_SIZE, m + 1 = #((ns -- n0) ++ n), is-encoded((ns -- n0) ++ n, buf + buf1), is-encoded(n, buf1), is-encoded(ns -- n0, buf), is-encoded(n0, buf2), n0 ∈ ns, ∀ ns0, buf0, ns2, buf1, n0. # ns0 < #(ns ++ n) → # buf0 = # ns2 * ENCODED_NAT_SIZE ∧ # buf1 = ENCODED_NAT_SIZE ∧ is-encoded(n0, buf1) ∧ is-encoded(ns2, buf0) → (is-encoded(ns0, buf0 + buf1) ↔ ns0 = ns2 ++ n0) ∨ n0 ∈ ns2 ⊦ ns = ∅, n ∈ ns, ∀ n1. n1 ∈ (ns -- n0) ++ n ↔ n1 ∈ (ns ++ n) -- n0 |
# buf = m * ENCODED_NAT_SIZE, # buf2 = ENCODED_NAT_SIZE, # buf1 = ENCODED_NAT_SIZE, # ns = m + 1, m + 1 = #((ns -- n0) ++ n), is-encoded(n0, buf2), is-encoded(ns -- n0, buf), is-encoded(n, buf1), is-encoded((ns -- n0) ++ n, buf + buf1), n0 ∈ ns, n1 = n ∨ n1 ≠ n0 ∧ n1 ∈ ns, ∀ ns0, buf0, ns2, buf1, n0. # ns0 < #(ns ++ n) → # buf0 = # ns2 * ENCODED_NAT_SIZE ∧ # buf1 = ENCODED_NAT_SIZE ∧ is-encoded(n0, buf1) ∧ is-encoded(ns2, buf0) → (is-encoded(ns0, buf0 + buf1) ↔ ns0 = ns2 ++ n0) ∨ n0 ∈ ns2 ⊦ ns = ∅, n ∈ ns, n1 ≠ n0 ∧ (n1 = n ∨ n1 ∈ ns)
Used simplifier rules: ⊦ n ∈ ns -- n0 ↔ n ≠ n0 ∧ n ∈ ns; (s)% ⊦ n ∈ ns ++ n0 ↔ n = n0 ∨ n ∈ ns; (s)