| # buf2 = # buf, # buf0 = # buf, # buf = n0 + n + 2 * NODE_HEADER_SIZE + n2 + node-size-headerless(nd), align↑(node-size-headerless(nd), 2 * NODE_HEADER_SIZE) = n2 + node-size-headerless(nd), subarray(buf2, 0, n + NODE_HEADER_SIZE) = subarray(buf0, 0, n + NODE_HEADER_SIZE), subarray(buf2, (n + NODE_HEADER_SIZE) + node-size-headerless(nd), NODE_HEADER_SIZE + n0 + n2) = subarray(buf0, (n + NODE_HEADER_SIZE) + node-size-headerless(nd), NODE_HEADER_SIZE + n0 + n2), subarray(buf0, 0, n) = subarray(buf, 0, n), subarray(buf0, n + NODE_HEADER_SIZE, node-size-headerless(nd) + NODE_HEADER_SIZE + n0 + n2) = subarray(buf, n + NODE_HEADER_SIZE, node-size-headerless(nd) + NODE_HEADER_SIZE + n0 + n2), n1 < 2 * NODE_HEADER_SIZE + node-size-headerless(nd) + n2, n1 < 2 * NODE_HEADER_SIZE + n2 + node-size-headerless(nd), n1 < # subarray(buf0, n, NODE_HEADER_SIZE) + #((subarray(buf2, n + NODE_HEADER_SIZE, node-size-headerless(nd)) + mkempbuf(n2)) + validtrailer), is-encoded(nodeheader(node-size-headerless(nd), false), subarray(buf0, n, NODE_HEADER_SIZE)), is-encoded(nd, subarray(buf2, n + NODE_HEADER_SIZE, node-size-headerless(nd))), n + NODE_HEADER_SIZE + node-size-headerless(nd) ≤ # buf, (n + NODE_HEADER_SIZE + node-size-headerless(nd)) + n2 ≤ # buf, (n + NODE_HEADER_SIZE) + node-size-headerless(nd) ≤ # buf, n + NODE_HEADER_SIZE ≤ # buf, n + 2 * NODE_HEADER_SIZE + n2 + node-size-headerless(nd) ≤ # buf, (n2 + node-size-headerless(nd)) + n + NODE_HEADER_SIZE ≤ # buf, 2 * NODE_HEADER_SIZE + n + n2 + node-size-headerless(nd) ≤ # buf ⊦ (n1 < NODE_HEADER_SIZE + node-size-headerless(nd) + n2 ⊃ (subarray(buf2, 0, n + NODE_HEADER_SIZE + node-size-headerless(nd)) + fill(mkbuf(n2), empty))[n + n1] ;(validtrailer)[n1 - NODE_HEADER_SIZE + node-size-headerless(nd) + n2] ) = (n1 < # subarray(buf0, n, NODE_HEADER_SIZE) ⊃ subarray(buf0, n, NODE_HEADER_SIZE)[n1] ;((subarray(buf2, n + NODE_HEADER_SIZE, node-size-headerless(nd)) + mkempbuf(n2)) + validtrailer)[n1 - # subarray(buf0, n, NODE_HEADER_SIZE)] ) |
# buf = n0 + n + 2 * NODE_HEADER_SIZE + n2 + node-size-headerless(nd), # buf0 = # buf, # buf2 = # buf, align↑(node-size-headerless(nd), 2 * NODE_HEADER_SIZE) = n2 + node-size-headerless(nd), subarray(buf0, n + NODE_HEADER_SIZE, node-size-headerless(nd) + NODE_HEADER_SIZE + n0 + n2) = subarray(buf, n + NODE_HEADER_SIZE, node-size-headerless(nd) + NODE_HEADER_SIZE + n0 + n2), subarray(buf0, 0, n) = subarray(buf, 0, n), subarray(buf2, (n + NODE_HEADER_SIZE) + node-size-headerless(nd), NODE_HEADER_SIZE + n0 + n2) = subarray(buf0, (n + NODE_HEADER_SIZE) + node-size-headerless(nd), NODE_HEADER_SIZE + n0 + n2), subarray(buf2, 0, n + NODE_HEADER_SIZE) = subarray(buf0, 0, n + NODE_HEADER_SIZE), n1 < 2 * NODE_HEADER_SIZE + n2 + node-size-headerless(nd), n1 < 2 * NODE_HEADER_SIZE + node-size-headerless(nd) + n2, is-encoded(nd, subarray(buf2, n + NODE_HEADER_SIZE, node-size-headerless(nd))), is-encoded(nodeheader(node-size-headerless(nd), false), subarray(buf0, n, NODE_HEADER_SIZE)), 2 * NODE_HEADER_SIZE + n + n2 + node-size-headerless(nd) ≤ # buf, (n2 + node-size-headerless(nd)) + n + NODE_HEADER_SIZE ≤ # buf, n + 2 * NODE_HEADER_SIZE + n2 + node-size-headerless(nd) ≤ # buf, n + NODE_HEADER_SIZE ≤ # buf, (n + NODE_HEADER_SIZE) + node-size-headerless(nd) ≤ # buf, (n + NODE_HEADER_SIZE + node-size-headerless(nd)) + n2 ≤ # buf, n + NODE_HEADER_SIZE + node-size-headerless(nd) ≤ # buf ⊦ (n1 < NODE_HEADER_SIZE + node-size-headerless(nd) + n2 ⊃ (subarray(buf2, 0, n + NODE_HEADER_SIZE + node-size-headerless(nd)) + fill(mkbuf(n2), empty))[n + n1] ;(validtrailer)[n1 - NODE_HEADER_SIZE + node-size-headerless(nd) + n2] ) = (n1 < NODE_HEADER_SIZE ⊃ buf0[n + n1] ;((subarray(buf2, n + NODE_HEADER_SIZE, node-size-headerless(nd)) + mkempbuf(n2)) + validtrailer)[n1 - NODE_HEADER_SIZE] )
Used simplifier rules: c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ m + m = 2 * m; (s)%append-a: ⊦ (buf + buf0) + buf1 = buf + buf0 + buf1; from specification array-splice[buffer]% ⊦ # validtrailer = NODE_HEADER_SIZE; (s)% ⊦ # mkempbuf(n) = n; (s)% ⊦ #(buf + buf0) = # buf + # buf0; (s)% ⊦ n0 < n → subarray(buf, m, n)[n0] = buf[m + n0]; (s)% ⊦ # subarray(buf, m, n) = n; (s)