| avol0[n] = mapped(buf), n < # avol0, ebm-vol-inv(avol0), avol0 ⊆ avol1 ⊦ avol1[n] = mapped(buf) |
avol0[n] = mapped(buf), n < # avol0, ebm-vol-inv(avol0), avol0 ⊆ avol1 ⊦ avol1[n] = mapped(buf)
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic