| is-aligned(n, EB_PAGE_SIZE), n ≤ # buf, align↑(datasize(buf, n), EB_PAGE_SIZE) ≤ # buf, align↑(datasize(buf, n), EB_PAGE_SIZE) ≤ n ⊦ ∀ n2. align↑(datasize(buf, n), EB_PAGE_SIZE) ≤ n2 ∧ n2 < n → buf[n2] = empty |
align↑(datasize(buf, n), EB_PAGE_SIZE) < # buf, n0 < n, align↑(datasize(buf, n), EB_PAGE_SIZE) < n, n0 < # buf, is-aligned(n, EB_PAGE_SIZE), align↑(datasize(buf, n), EB_PAGE_SIZE) ≤ n0, n ≤ # buf ⊦ buf[n0] = empty
Used simplifier rules: ⊦ m < n → m ≤ n; (s)% ⊦ m < n → n ≠ 0; (s)%fle-01: ⊦ m ≤ n ∧ n < n0 → m < n0; (forward) from specification nat%fle: ⊦ m < n ∧ n ≤ n0 → m < n0; (forward) from specification nat%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic%let: ⊦ n ≤ n0 ∧ n0 ≤ n1 → n ≤ n1; (forward) from specification nat