| # buf = n1 + n, n0 < n1 + n, n0 < # mkempbuf(n), ∀ n0. n0 < n → buf[n0] = empty ⊦ buf[n0] = mkempbuf(n)[n0] |
# buf = n1 + n, n0 < n, n0 < n1 + n, ∀ n0. n0 < n → buf[n0] = empty ⊦ buf[n0] = empty
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic% ⊦ m < n → mkempbuf(n)[m] = empty; (s)% ⊦ # mkempbuf(n) = n; (s)