| # buf = LEB_SIZE, n + m + 1 ≤ # avol ⊦ lebs(avol[n + m, mapped(buf)], n, m + 1) = lebs(avol, n, m) + buf |
# buf = LEB_SIZE, n + m < # avol ⊦ lebs(avol[n + m, mapped(buf)], n, m + 1) = lebs(avol, n, m) + buf
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ m + 1 ≤ n ↔ m < n; (s)