| # buf = # orphans1 * ENCODED_NAT_SIZE, (ENCODED_NAT_SIZE * m2 + ENCODED_NAT_SIZE) + m = # buf, err = ESUCCESS, orphans ∩ orphans0 = ∅, is-encoded(orphans, subarray(buf, m, ENCODED_NAT_SIZE * m2 + ENCODED_NAT_SIZE)), is-encoded(orphans0, subarray(buf, 0, m)), is-encoded(orphans1, buf), err = ESUCCESS → is-encoded(n, subarray(buf, m, ENCODED_NAT_SIZE)) ∧ m + ENCODED_NAT_SIZE ≤ # buf ∧ m0 = ENCODED_NAT_SIZE, err = ESUCCESS ∨ ⌊err⌋ ⊦ ⟪orphans0 := orphans0 ++ n; m := m + ENCODED_NAT_SIZE; m4 := m2⟫ ( (err = ESUCCESS ∨ ⌊err⌋ ) ∧ m + m4 * ENCODED_NAT_SIZE = # buf ∧ ( err = ESUCCESS → is-encoded(orphans0, subarray(buf, 0, m)) ∧ (∃ orphans. is-encoded(orphans, subarray(buf, m, # buf - m)) ∧ orphans ∩ orphans0 = ∅)) ∧ ¬ m2 < m4) |
# buf = # orphans1 * ENCODED_NAT_SIZE, (ENCODED_NAT_SIZE * m2 + ENCODED_NAT_SIZE) + m = # buf, err = ESUCCESS, orphans ∩ orphans0 = ∅, is-encoded(orphans1, buf), is-encoded(orphans0, subarray(buf, 0, m)), is-encoded(orphans, subarray(buf, m, ENCODED_NAT_SIZE * m2 + ENCODED_NAT_SIZE)), err = ESUCCESS → is-encoded(n, subarray(buf, m, ENCODED_NAT_SIZE)) ∧ m + ENCODED_NAT_SIZE ≤ # buf ∧ m0 = ENCODED_NAT_SIZE, err = ESUCCESS ∨ ⌊err⌋ ⊦ ⟪m := m + ENCODED_NAT_SIZE; m4 := m2⟫ ( (err = ESUCCESS ∨ ⌊err⌋ ) ∧ m + m4 * ENCODED_NAT_SIZE = # buf ∧ ( err = ESUCCESS → is-encoded(orphans0 ++ n, subarray(buf, 0, m)) ∧ (∃ orphans. is-encoded(orphans, subarray(buf, m, # buf - m)) ∧ orphans ∩ (orphans0 ++ n) = ∅)) ∧ ¬ m2 < m4)