| m0 + 1 = # pebs, pebs[m0] = mkpeb(buf, m, true), n < m0, # apebs < m0, abs(subarray(pebs, 0, m0), apebs), ubi-io-initial(pebs), # apebs ≤ n ⊦ n = m0, ubi-io-peb-initial(apebs[n]) |
⊦ abs(pebs, apebs) ↔ # pebs = # apebs ∧ (∀ n. n < # pebs → abs-peb(pebs[n], apebs[n]))
Used simplifier rules: ⊦ # subarray(pebs, m, n) = n; (s)%lf-01: ⊦ m < n ∧ n = n0 → m < n0; (forward) from specification nat-basic%lf-02: ⊦ m < n ∧ m = n0 → n0 < n; (forward) from specification nat-basic% ⊦ m ≤ n → (n < m ↔ false); (s)%# pebs = n ⊦ subarray(pebs, 0, n) = pebs; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic% ⊦ m < n → n ≠ 0; (s)% ⊦ m < n → ¬ n < m; (s) Used terms: apebs, subarray(pebs, 0, m0)