Used simplifier rules: inv-listlen-ls1: ⊦ inv(mkblock(x, lax, m0)) → ¬ # x < # lax;%# lax ≤ m ⊦ prefixn(m, lax) = lax; (s)% ⊦ m ≤ n ↔ ¬ n < m; (ss)