| # buf = # ns1 * ENCODED_NAT_SIZE, # buf = # ns0 * ENCODED_NAT_SIZE, is-encoded(ns0, buf), is-encoded(ns1, buf), ∀ ns, buf, ns1. # ns < # ns0 → # buf = # ns1 * ENCODED_NAT_SIZE ∧ # buf = # ns * ENCODED_NAT_SIZE ∧ is-encoded(ns, buf) ∧ is-encoded(ns1, buf) → ns = ns1 ⊦ ns0 = ns1 |
# buf = # ns0 * ENCODED_NAT_SIZE, # buf = # ns1 * ENCODED_NAT_SIZE, is-encoded(ns1, buf), is-encoded(ns0, buf), ∀ ns, buf, ns1. # ns < # ns0 → # buf = # ns1 * ENCODED_NAT_SIZE ∧ # buf = # ns * ENCODED_NAT_SIZE ∧ is-encoded(ns, buf) ∧ is-encoded(ns1, buf) → ns = ns1 ⊦ ns0 = ns1