| # lpt2 = n1 + n0, # lpt1 = n1 + n0, # buf = lptsize(n1 + n0, LEB_SIZE), is-encoded(lpt1, buf, n0), is-encoded(lp0, subarray(buf, n0 * ENCODED_LPROPS_SIZE, ENCODED_LPROPS_SIZE)), n0 * ENCODED_LPROPS_SIZE + ENCODED_LPROPS_SIZE ≤ # buf ⊦ n1 = 0, # buf = lptsize(# lpt1[n0, lp0], LEB_SIZE) ∧ (∀ m. m < # lpt1[n0, lp0] ∧ m < n0 + 1 → is-encoded(lpt1[n0, lp0][m], subarray(buf, m * ENCODED_LPROPS_SIZE, ENCODED_LPROPS_SIZE))) |
# buf = lptsize(n1 + n0, LEB_SIZE), # lpt1 = n1 + n0, # lpt2 = n1 + n0, m < n1 + n0, is-encoded(lp0, subarray(buf, n0 * ENCODED_LPROPS_SIZE, ENCODED_LPROPS_SIZE)), is-encoded(lpt1, buf, n0), m ≤ n0, n0 * ENCODED_LPROPS_SIZE + ENCODED_LPROPS_SIZE ≤ # buf ⊦ n1 = 0, is-encoded(lpt1[n0, lp0][m], subarray(buf, m * ENCODED_LPROPS_SIZE, ENCODED_LPROPS_SIZE))
Used simplifier rules: lf-01: ⊦ m < n ∧ n = n0 → m < n0; (forward) from specification nat-basic% ⊦ m < n ↔ ¬ n ≤ m; (ss)%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ m < n + 1 ↔ ¬ n < m; (s)% ⊦ # lpt[n, lp] = # lpt; (s)