| # buf3 = NODE_HEADER_SIZE, # buf2 = nd.alignedsize, is-aligned(# buf1, NODE_HEADER_SIZE), is-encoded(nd, subarray(buf2, 0, node-size-headerless(nd))), is-encoded(nodeheader(node-size-headerless(nd), false), buf3), nd.alignedsize + NODE_HEADER_SIZE + # buf1 ≤ align↑(node-size-headerless(nd), 2 * NODE_HEADER_SIZE) ⊦ |
⊦ nd.alignedsize = align↑(node-size-headerless(nd), 2 * NODE_HEADER_SIZE)
Used simplifier rules: ⊦ 2 * m = 0 ↔ m = 0; (s)% ⊦ NODE_HEADER_SIZE ≠ 0; (s)%mult-a: ⊦ m0 * m * n = (m0 * m) * n; from specification nat-mult%mult-c: ⊦ m * n = n * m; from specification nat-mult% ⊦ m + m0 ≤ m ↔ m0 = 0; (s)% ⊦ m + n = 0 ↔ m = 0 ∧ n = 0; (ws)%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic%c: ⊦ m + n = n + m; from specification nat-basic%n ≠ 0, m % n = 0 ⊦ align↑(m, n) = m; (s) Used terms: nd