| # orphans1 = m + 1, # buf0 = # buf, # buf = n0 + m0 + ENCODED_NAT_SIZE, subarray(buf0, m0 + ENCODED_NAT_SIZE, n0) = subarray(buf, m0 + ENCODED_NAT_SIZE, n0), subarray(buf0, 0, m0) = subarray(buf, 0, m0), is-aligned(# buf, EB_PAGE_SIZE), is-encoded(n, subarray(buf0, m0, ENCODED_NAT_SIZE)), is-encoded(orphans2 \ orphans1, subarray(buf, 0, m0)), n ∈ orphans2, n ∈ orphans1, m0 + ENCODED_NAT_SIZE * m + ENCODED_NAT_SIZE ≤ LEB_SIZE, m0 + ENCODED_NAT_SIZE * m + ENCODED_NAT_SIZE ≤ # buf, # orphans2 * ENCODED_NAT_SIZE ≤ LEB_SIZE, # buf ≤ LEB_SIZE, m0 + ENCODED_NAT_SIZE ≤ LEB_SIZE, m0 + ENCODED_NAT_SIZE ≤ # buf, orphans1 ⊆ orphans2 ⊦ # orphans2 = 0, orphans1 = ∅, orphans2 = ∅, is-encoded((orphans2 \ orphans1) ++ n, subarray(buf0, 0, m0) + subarray(buf0, 0 + m0, ENCODED_NAT_SIZE)) |
# buf = n0 + m0 + ENCODED_NAT_SIZE, # buf0 = # buf, # orphans1 = m + 1, subarray(buf0, 0, m0) = subarray(buf, 0, m0), subarray(buf0, m0 + ENCODED_NAT_SIZE, n0) = subarray(buf, m0 + ENCODED_NAT_SIZE, n0), is-aligned(# buf, EB_PAGE_SIZE), is-encoded(orphans2 \ orphans1, subarray(buf, 0, m0)), is-encoded(n, subarray(buf0, m0, ENCODED_NAT_SIZE)), n ∈ orphans1, n ∈ orphans2, m0 + ENCODED_NAT_SIZE ≤ # buf, m0 + ENCODED_NAT_SIZE ≤ LEB_SIZE, # buf ≤ LEB_SIZE, # orphans2 * ENCODED_NAT_SIZE ≤ LEB_SIZE, m0 + ENCODED_NAT_SIZE * m + ENCODED_NAT_SIZE ≤ # buf, m0 + ENCODED_NAT_SIZE * m + ENCODED_NAT_SIZE ≤ LEB_SIZE, orphans1 ⊆ orphans2 ⊦ # orphans2 = 0, orphans1 = ∅, orphans2 = ∅, is-encoded((orphans2 \ orphans1) ++ n, subarray(buf, 0, m0) + subarray(buf0, m0, ENCODED_NAT_SIZE))
Used simplifier rules: c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ n + 0 = n; (s)