| n + m ≤ n0 ⊦ mapped-full?(avol[n0, aleb], n, m) ↔ mapped-full?(avol, n, m) |
Used simplifier rules: mapped-full: ⊦ mapped-full?(avol, n, m) ↔ (∀ n0. n ≤ n0 ∧ n0 < n + m ∧ n0 < # avol → avol[n0].mapped? ∧ # avol[n0].data = LEB_SIZE);% ⊦ aleb.mapped? ↔ (∃ buf. aleb = mapped(buf)); (as)%m ≠ n ⊦ avol[m, aleb][n] = avol[n]; (s)% ⊦ m ≤ n → (n < m ↔ false); (s)% ⊦ m < # avol → avol[m, aleb][m] = aleb; (s)% ⊦ # avol[n, aleb] = # avol; (s)