| # x = # lax, lax[n] = @(m1, m2), n < # lax, ∀ n. ¬ # lax < n → (lax + @(m, m0) ')[n].size = (x + a ')[n].flashsize ⊦ m2 = x[n].flashsize |
# x = # lax, lax[n] = @(m1, m2), n < # lax, ∀ n. ¬ # lax < n → (lax + @(m, m0) ')[n].size = (x + a ')[n].flashsize ⊦ lax = [], m2 = x[n].flashsize
Used simplifier rules: ⊦ # lax = 0 ↔ lax = []; (s)%lf-01: ⊦ m < n ∧ n = n0 → m < n0; (forward) from specification nat-basic%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic