| # buf0 = # buf0, is-encoded(nd, subarray(buf1, NODE_HEADER_SIZE, node-size-headerless(nd))), is-encoded(nodeheader(node-size-headerless(nd), false), subarray(buf1, 0, NODE_HEADER_SIZE)), range=(buf1, NODE_HEADER_SIZE + align↑(node-size-headerless(nd), 2 * NODE_HEADER_SIZE), validtrailer, 0, NODE_HEADER_SIZE), NODE_HEADER_SIZE + node-size-headerless(nd) ≤ # buf1, NODE_HEADER_SIZE ≤ # buf1, align↑(node-size-headerless(nd), 2 * NODE_HEADER_SIZE) + 2 * NODE_HEADER_SIZE ≤ # buf1, 2 * NODE_HEADER_SIZE + align↑(node-size-headerless(nd), 2 * NODE_HEADER_SIZE) ≤ # buf1 ⊦ ∃ buf2, buf3. subarray(buf1, 0, 2 * NODE_HEADER_SIZE + align↑(node-size-headerless(nd), 2 * NODE_HEADER_SIZE)) = buf2 + buf3 + validtrailer ∧ is-encoded(nodeheader(node-size-headerless(nd), false), buf2) ∧ is-encoded(nd, subarray(buf3, 0, node-size-headerless(nd))) ∧ # buf3 = align↑(node-size-headerless(nd), 2 * NODE_HEADER_SIZE) |
is-encoded(nodeheader(node-size-headerless(nd), false), subarray(buf1, 0, NODE_HEADER_SIZE)), is-encoded(nd, subarray(buf1, NODE_HEADER_SIZE, node-size-headerless(nd))), range=(buf1, NODE_HEADER_SIZE + align↑(node-size-headerless(nd), 2 * NODE_HEADER_SIZE), validtrailer, 0, NODE_HEADER_SIZE), 2 * NODE_HEADER_SIZE + align↑(node-size-headerless(nd), 2 * NODE_HEADER_SIZE) ≤ # buf1, align↑(node-size-headerless(nd), 2 * NODE_HEADER_SIZE) + 2 * NODE_HEADER_SIZE ≤ # buf1, NODE_HEADER_SIZE ≤ # buf1, NODE_HEADER_SIZE + node-size-headerless(nd) ≤ # buf1 ⊦ ∃ buf2, buf3. subarray(buf1, 0, 2 * NODE_HEADER_SIZE + align↑(node-size-headerless(nd), 2 * NODE_HEADER_SIZE)) = buf2 + buf3 + validtrailer ∧ is-encoded(nodeheader(node-size-headerless(nd), false), buf2) ∧ is-encoded(nd, subarray(buf3, 0, node-size-headerless(nd))) ∧ # buf3 = align↑(node-size-headerless(nd), 2 * NODE_HEADER_SIZE)