| # buf = n1 + n, n0 < n1 + n, n0 < n + n1, n ≤ n0, ∀ n0. n0 < n → buf[n0] = empty ⊦ buf[n0] = subarray(buf, n, n1)[n0 - n], n1 = 0 |
Used simplifier rules: ⊦ m ≤ m + n; (s)%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic%c: ⊦ m + n = n + m; from specification nat-basic% ⊦ m + n < m + n0 ↔ n < n0; (s)% ⊦ m < n → n ≠ 0; (s)% ⊦ n0 < n → subarray(buf, m, n)[n0] = buf[m + n0]; (s)%n ≤ m ⊦ n0 = m - n ↔ m = n0 + n; (elim) Used terms: n0, n, n2