| apebs0 = apebs, ubi-io-inv(apebs), ubi-io-read-echdr-pre(n, apebs) ⊦ ⟨aubi_io_read_echdr#(n, apebs; aehdr; bitflips, err)⟩ (apebs0 = apebs) |
n < # apebs, ubi-io-inv(apebs), ¬ apebs[n].bad ⊦ ⟨aubi_io_read_echdr#(n, apebs; aehdr; bitflips, err)⟩ true
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic% ⊦ ubi-io-read-echdr-pre(n, apebs) ↔ n < # apebs ∧ ¬ apebs[n].bad; (s)