[
  "1燐\tE圃k扌\"嘹鶾y",
  [
    [
      "MerkleTree.New.High.Correct.Flushing.mt_flush_to_olds",
      1,
      2,
      1,
      [
        "@MaxIFuel_assumption", "@query", "equation_Prims.nat",
        "int_inversion", "primitive_Prims.op_LessThanOrEqual",
        "primitive_Prims.op_Subtraction",
        "projection_inverse_BoxBool_proj_0",
        "projection_inverse_BoxInt_proj_0",
        "refinement_interpretation_Tm_refine_4d0ab6134173bbad75f08ef14247f657",
        "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2",
        "refinement_interpretation_Tm_refine_ad53f3413fd15db5258446e997071714",
        "refinement_interpretation_Tm_refine_da1b0dfb8283502ec162998a8bbb6431"
      ],
      0,
      "7f059da7275631ad7e302252e3d78367"
    ],
    [
      "MerkleTree.New.High.Correct.Flushing.mt_flush_to_olds",
      2,
      2,
      1,
      [
        "@MaxIFuel_assumption", "@query", "equation_Prims.nat",
        "int_inversion", "primitive_Prims.op_LessThanOrEqual",
        "primitive_Prims.op_Subtraction",
        "projection_inverse_BoxBool_proj_0",
        "projection_inverse_BoxInt_proj_0",
        "refinement_interpretation_Tm_refine_4d0ab6134173bbad75f08ef14247f657",
        "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2",
        "refinement_interpretation_Tm_refine_ad53f3413fd15db5258446e997071714",
        "refinement_interpretation_Tm_refine_da1b0dfb8283502ec162998a8bbb6431"
      ],
      0,
      "a82ca42bb8435ab98e32b79e72fdc273"
    ],
    [
      "MerkleTree.New.High.Correct.Flushing.mt_flush_to_olds",
      3,
      2,
      1,
      [
        "@MaxFuel_assumption", "@MaxIFuel_assumption",
        "@fuel_correspondence_MerkleTree.New.High.Correct.Base.mt_olds_inv.fuel_instrumented",
        "@fuel_correspondence_MerkleTree.New.High.hs_wf_elts.fuel_instrumented",
        "@fuel_correspondence_Prims.pow2.fuel_instrumented",
        "@fuel_irrelevance_MerkleTree.New.High.Correct.Base.mt_olds_inv.fuel_instrumented",
        "@fuel_irrelevance_MerkleTree.New.High.hs_wf_elts.fuel_instrumented",
        "@fuel_irrelevance_Prims.pow2.fuel_instrumented", "@query",
        "Prims_pretyping_ae567c2fb75be05905677af440075565",
        "binder_x_0e34d6ba5aadb6ae8199afa904b3bbdb_7",
        "binder_x_1efd3135b389a1c7e3a2fc82df2bbe21_5",
        "binder_x_20ef783cabfdc90ae174ed55c128717b_4",
        "binder_x_a3a9d1e443789a10c20ec8f7e2fe66e3_2",
        "binder_x_a781c67b3813f82607f5722fcf0c9c76_6",
        "binder_x_bb4e1c9af0265270f8e7a5f250f730e2_3",
        "binder_x_f26957a7e62b271a8736230b1e9c83c1_0",
        "constructor_distinct_FStar.Integers.W16",
        "constructor_distinct_FStar.Integers.W31",
        "constructor_distinct_FStar.Integers.W8",
        "constructor_distinct_Lib.IntTypes.U32", "eq2-interp",
        "equality_tok_FStar.Integers.W16@tok",
        "equality_tok_FStar.Integers.W31@tok",
        "equality_tok_FStar.Integers.W8@tok",
        "equality_tok_Lib.IntTypes.U32@tok", "equality_tok_Prims.LexTop@tok",
        "equation_Lib.IntTypes.bits", "equation_MerkleTree.New.High.hash",
        "equation_MerkleTree.New.High.hashes",
        "equation_MerkleTree.New.High.hashess",
        "equation_MerkleTree.New.High.offset_of", "equation_Prims.eqtype",
        "equation_Prims.nat", "equation_Prims.pos",
        "equation_Spec.Poly1305.size_key",
        "equation_with_fuel_MerkleTree.New.High.Correct.Base.mt_olds_inv.fuel_instrumented",
        "equation_with_fuel_MerkleTree.New.High.hs_wf_elts.fuel_instrumented",
        "equation_with_fuel_Prims.pow2.fuel_instrumented",
        "function_token_typing_Prims.__cache_version_number__",
        "function_token_typing_Prims.int",
        "haseqTm_refine_542f9d4f129664613f2483a6c88bc7c2", "int_inversion",
        "int_typing", "l_and-interp", "lemma_FStar.Seq.Base.lemma_eq_elim",
        "lemma_FStar.Seq.Base.lemma_eq_intro",
        "lemma_FStar.Seq.Base.lemma_eq_refl",
        "lemma_FStar.Seq.Base.lemma_index_slice",
        "lemma_FStar.Seq.Base.lemma_index_upd1",
        "lemma_FStar.Seq.Base.lemma_index_upd2",
        "lemma_FStar.Seq.Base.lemma_len_append",
        "lemma_FStar.Seq.Base.lemma_len_slice",
        "lemma_FStar.Seq.Base.lemma_len_upd",
        "lemma_FStar.Seq.Properties.slice_upd",
        "lemma_FStar.UInt.pow2_values",
        "lemma_MerkleTree.New.High.seq_slice_equal_index",
        "lemma_Spec.Curve25519.Lemmas.lemma_div_n",
        "primitive_Prims.op_Addition", "primitive_Prims.op_AmpAmp",
        "primitive_Prims.op_Division", "primitive_Prims.op_Equality",
        "primitive_Prims.op_LessThan", "primitive_Prims.op_LessThanOrEqual",
        "primitive_Prims.op_Modulus", "primitive_Prims.op_Multiply",
        "primitive_Prims.op_Subtraction",
        "projection_inverse_BoxBool_proj_0",
        "projection_inverse_BoxInt_proj_0",
        "projection_inverse_FStar.Integers.Signed__0",
        "projection_inverse_FStar.Integers.Unsigned__0",
        "refinement_interpretation_Tm_refine_03d8bb38997e9403d2effbb972e2ec07",
        "refinement_interpretation_Tm_refine_0545ca68af3b2fc8df509fb388f7f2ee",
        "refinement_interpretation_Tm_refine_0ec011aea9f93256a3547ad9f0c667f1",
        "refinement_interpretation_Tm_refine_11ff5223149858a6ed39dcb0f334332c",
        "refinement_interpretation_Tm_refine_16113b670c3948241b38ee17f4d8fb91",
        "refinement_interpretation_Tm_refine_27e93fd1252ffee400912afd0e77b1ba",
        "refinement_interpretation_Tm_refine_2ca062977a42c36634b89c1c4f193f79",
        "refinement_interpretation_Tm_refine_35a0739c434508f48d0bb1d5cd5df9e8",
        "refinement_interpretation_Tm_refine_39306dfd6669708e31eb0364de2c27d9",
        "refinement_interpretation_Tm_refine_414d0a9f578ab0048252f8c8f552b99f",
        "refinement_interpretation_Tm_refine_527e8dd31becd17d6b7d9df3614c9953",
        "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2",
        "refinement_interpretation_Tm_refine_5a8634b460d149c76a5c0476662af1d0",
        "refinement_interpretation_Tm_refine_774ba3f728d91ead8ef40be66c9802e5",
        "refinement_interpretation_Tm_refine_81407705a0828c2c1b1976675443f647",
        "refinement_interpretation_Tm_refine_ad53f3413fd15db5258446e997071714",
        "refinement_interpretation_Tm_refine_d022e51698263de0859911b2eaa8436b",
        "refinement_interpretation_Tm_refine_d3d07693cd71377864ef84dc97d10ec1",
        "refinement_interpretation_Tm_refine_d83f8da8ef6c1cb9f71d1465c1bb1c55",
        "refinement_interpretation_Tm_refine_da1b0dfb8283502ec162998a8bbb6431",
        "refinement_interpretation_Tm_refine_df81b3f17797c6f405c1dbb191651292",
        "refinement_interpretation_Tm_refine_dfd7831358eafa1a0f79e4e16bc4f710",
        "typing_FStar.Seq.Base.index", "typing_FStar.Seq.Base.length",
        "typing_FStar.Seq.Base.slice", "typing_MerkleTree.New.High.hash",
        "typing_MerkleTree.New.High.hashes",
        "typing_MerkleTree.New.High.offset_of",
        "typing_Spec.Poly1305.size_key", "well-founded-ordering-on-nat"
      ],
      0,
      "209ee4b4b56893392f0b493276ce9624"
    ],
    [
      "MerkleTree.New.High.Correct.Flushing.mt_flush_to_olds_hs_equiv",
      1,
      2,
      1,
      [
        "@MaxIFuel_assumption", "@query", "equation_Prims.nat",
        "int_inversion", "primitive_Prims.op_LessThanOrEqual",
        "primitive_Prims.op_Subtraction",
        "projection_inverse_BoxBool_proj_0",
        "projection_inverse_BoxInt_proj_0",
        "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2",
        "refinement_interpretation_Tm_refine_5664991902867dbaea8455604edd6227",
        "refinement_interpretation_Tm_refine_ad53f3413fd15db5258446e997071714",
        "refinement_interpretation_Tm_refine_da1b0dfb8283502ec162998a8bbb6431"
      ],
      0,
      "6d5e53103a45e327f68d13763626ed23"
    ],
    [
      "MerkleTree.New.High.Correct.Flushing.mt_flush_to_olds_hs_equiv",
      2,
      2,
      1,
      [
        "@MaxIFuel_assumption", "@query",
        "constructor_distinct_Lib.IntTypes.U8",
        "equality_tok_Lib.IntTypes.U1@tok",
        "equality_tok_Lib.IntTypes.U8@tok", "equation_Lib.IntTypes.unsigned",
        "equation_Prims.nat", "equation_Spec.AES.gf8",
        "equation_Spec.AES.irred", "equation_Spec.GaloisField.gf",
        "int_inversion", "primitive_Prims.op_LessThanOrEqual",
        "primitive_Prims.op_Subtraction",
        "proj_equation_Spec.GaloisField.GF_t",
        "projection_inverse_BoxBool_proj_0",
        "projection_inverse_BoxInt_proj_0",
        "projection_inverse_Spec.GaloisField.GF_t",
        "refinement_interpretation_Tm_refine_2c259961b3dd2c351bda225303f14563",
        "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2",
        "refinement_interpretation_Tm_refine_5664991902867dbaea8455604edd6227",
        "refinement_interpretation_Tm_refine_ad53f3413fd15db5258446e997071714",
        "refinement_interpretation_Tm_refine_da1b0dfb8283502ec162998a8bbb6431",
        "refinement_interpretation_Tm_refine_de8080fdc4bd6678af723874a7d70466",
        "typing_Spec.AES.gf8", "typing_Spec.GaloisField.__proj__GF__item__t"
      ],
      0,
      "845c7a319e4c037a971877b2eb9c1531"
    ],
    [
      "MerkleTree.New.High.Correct.Flushing.mt_flush_to_olds_hs_equiv",
      3,
      2,
      1,
      [
        "@MaxFuel_assumption", "@MaxIFuel_assumption",
        "@fuel_correspondence_MerkleTree.New.High.Correct.Base.mt_olds_inv.fuel_instrumented",
        "@fuel_correspondence_MerkleTree.New.High.Correct.Flushing.mt_flush_to_olds.fuel_instrumented",
        "@fuel_correspondence_MerkleTree.New.High.hs_wf_elts.fuel_instrumented",
        "@fuel_correspondence_Prims.pow2.fuel_instrumented",
        "@fuel_irrelevance_MerkleTree.New.High.Correct.Base.mt_olds_inv.fuel_instrumented",
        "@fuel_irrelevance_MerkleTree.New.High.Correct.Flushing.mt_flush_to_olds.fuel_instrumented",
        "@fuel_irrelevance_MerkleTree.New.High.hs_wf_elts.fuel_instrumented",
        "@fuel_irrelevance_Prims.pow2.fuel_instrumented", "@query",
        "Prims_pretyping_ae567c2fb75be05905677af440075565",
        "binder_x_0e34d6ba5aadb6ae8199afa904b3bbdb_7",
        "binder_x_0e34d6ba5aadb6ae8199afa904b3bbdb_8",
        "binder_x_1efd3135b389a1c7e3a2fc82df2bbe21_5",
        "binder_x_20ef783cabfdc90ae174ed55c128717b_4",
        "binder_x_5e20d151293c9e40e5203cbcff29aebe_1",
        "binder_x_a3a9d1e443789a10c20ec8f7e2fe66e3_2",
        "binder_x_a781c67b3813f82607f5722fcf0c9c76_6",
        "binder_x_bb4e1c9af0265270f8e7a5f250f730e2_3",
        "binder_x_f26957a7e62b271a8736230b1e9c83c1_0", "bool_inversion",
        "constructor_distinct_FStar.Integers.W31",
        "constructor_distinct_FStar.Integers.W8",
        "constructor_distinct_Lib.IntTypes.U32", "eq2-interp",
        "equality_tok_FStar.Integers.W31@tok",
        "equality_tok_FStar.Integers.W8@tok",
        "equality_tok_Lib.IntTypes.U32@tok", "equality_tok_Prims.LexTop@tok",
        "equation_Lib.IntTypes.unsigned",
        "equation_MerkleTree.New.High.hashes",
        "equation_MerkleTree.New.High.hashess",
        "equation_MerkleTree.New.High.offset_of", "equation_Prims.eqtype",
        "equation_Prims.nat", "equation_Prims.pos",
        "equation_Spec.Poly1305.size_key",
        "equation_with_fuel_MerkleTree.New.High.Correct.Base.mt_olds_inv.fuel_instrumented",
        "equation_with_fuel_MerkleTree.New.High.Correct.Flushing.mt_flush_to_olds.fuel_instrumented",
        "equation_with_fuel_MerkleTree.New.High.hs_wf_elts.fuel_instrumented",
        "equation_with_fuel_Prims.pow2.fuel_instrumented",
        "function_token_typing_Prims.__cache_version_number__",
        "function_token_typing_Prims.int",
        "haseqTm_refine_542f9d4f129664613f2483a6c88bc7c2", "int_inversion",
        "int_typing", "l_and-interp", "lemma_FStar.Seq.Base.lemma_eq_elim",
        "lemma_FStar.Seq.Base.lemma_eq_refl",
        "lemma_FStar.Seq.Base.lemma_len_upd",
        "lemma_FStar.Seq.Properties.slice_upd",
        "lemma_FStar.UInt.pow2_values",
        "lemma_MerkleTree.New.High.seq_slice_equal_index",
        "lemma_MerkleTree.New.High.seq_slice_more_equal",
        "primitive_Prims.op_Addition", "primitive_Prims.op_AmpAmp",
        "primitive_Prims.op_Division", "primitive_Prims.op_Equality",
        "primitive_Prims.op_LessThan", "primitive_Prims.op_LessThanOrEqual",
        "primitive_Prims.op_Modulus", "primitive_Prims.op_Multiply",
        "primitive_Prims.op_Subtraction",
        "projection_inverse_BoxBool_proj_0",
        "projection_inverse_BoxInt_proj_0",
        "projection_inverse_FStar.Integers.Signed__0",
        "projection_inverse_FStar.Integers.Unsigned__0",
        "refinement_interpretation_Tm_refine_0545ca68af3b2fc8df509fb388f7f2ee",
        "refinement_interpretation_Tm_refine_0ec011aea9f93256a3547ad9f0c667f1",
        "refinement_interpretation_Tm_refine_11ff5223149858a6ed39dcb0f334332c",
        "refinement_interpretation_Tm_refine_16113b670c3948241b38ee17f4d8fb91",
        "refinement_interpretation_Tm_refine_27e93fd1252ffee400912afd0e77b1ba",
        "refinement_interpretation_Tm_refine_2ca062977a42c36634b89c1c4f193f79",
        "refinement_interpretation_Tm_refine_3d93e3571976634af2ba31f6b362fa73",
        "refinement_interpretation_Tm_refine_414d0a9f578ab0048252f8c8f552b99f",
        "refinement_interpretation_Tm_refine_4d0ab6134173bbad75f08ef14247f657",
        "refinement_interpretation_Tm_refine_527e8dd31becd17d6b7d9df3614c9953",
        "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2",
        "refinement_interpretation_Tm_refine_5664991902867dbaea8455604edd6227",
        "refinement_interpretation_Tm_refine_571d9f74016be5357787170b42ecf913",
        "refinement_interpretation_Tm_refine_5a8634b460d149c76a5c0476662af1d0",
        "refinement_interpretation_Tm_refine_774ba3f728d91ead8ef40be66c9802e5",
        "refinement_interpretation_Tm_refine_81407705a0828c2c1b1976675443f647",
        "refinement_interpretation_Tm_refine_ad53f3413fd15db5258446e997071714",
        "refinement_interpretation_Tm_refine_cc7ec1228e62f637b46417d43aae0cfa",
        "refinement_interpretation_Tm_refine_d022e51698263de0859911b2eaa8436b",
        "refinement_interpretation_Tm_refine_d3d07693cd71377864ef84dc97d10ec1",
        "refinement_interpretation_Tm_refine_d83f8da8ef6c1cb9f71d1465c1bb1c55",
        "refinement_interpretation_Tm_refine_da1b0dfb8283502ec162998a8bbb6431",
        "refinement_interpretation_Tm_refine_dfd7831358eafa1a0f79e4e16bc4f710",
        "typing_FStar.Seq.Base.slice", "typing_Lib.IntTypes.unsigned",
        "typing_MerkleTree.New.High.hashes",
        "typing_MerkleTree.New.High.offset_of",
        "typing_Spec.Poly1305.size_key", "typing_tok_Lib.IntTypes.U32@tok",
        "well-founded-ordering-on-nat"
      ],
      0,
      "784f6a154ea4f6c1cfa4aee54dbb1f52"
    ],
    [
      "MerkleTree.New.High.Correct.Flushing.mt_flush_to_merge_preserved",
      1,
      2,
      1,
      [
        "@MaxIFuel_assumption", "@query", "equation_Prims.nat",
        "equation_Prims.pos", "int_inversion",
        "primitive_Prims.op_Subtraction", "projection_inverse_BoxInt_proj_0",
        "refinement_interpretation_Tm_refine_3d93e3571976634af2ba31f6b362fa73",
        "refinement_interpretation_Tm_refine_4d0ab6134173bbad75f08ef14247f657",
        "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2",
        "refinement_interpretation_Tm_refine_5664991902867dbaea8455604edd6227",
        "refinement_interpretation_Tm_refine_774ba3f728d91ead8ef40be66c9802e5",
        "refinement_interpretation_Tm_refine_ad53f3413fd15db5258446e997071714",
        "refinement_interpretation_Tm_refine_c1f80bc31cbe9b996d4b2f695bb8d54d",
        "refinement_interpretation_Tm_refine_da1b0dfb8283502ec162998a8bbb6431",
        "typing_MerkleTree.New.High.Correct.Flushing.mt_flush_to_olds"
      ],
      0,
      "46f0af7d89e9630758bdced9d804b0b8"
    ],
    [
      "MerkleTree.New.High.Correct.Flushing.mt_flush_to_merge_preserved",
      2,
      2,
      1,
      [
        "@MaxIFuel_assumption", "@query", "equation_Prims.nat",
        "equation_Prims.pos", "int_inversion",
        "primitive_Prims.op_Subtraction", "projection_inverse_BoxInt_proj_0",
        "refinement_interpretation_Tm_refine_3d93e3571976634af2ba31f6b362fa73",
        "refinement_interpretation_Tm_refine_4d0ab6134173bbad75f08ef14247f657",
        "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2",
        "refinement_interpretation_Tm_refine_774ba3f728d91ead8ef40be66c9802e5",
        "refinement_interpretation_Tm_refine_803f3a6ae89fda993f220e10da390db8",
        "refinement_interpretation_Tm_refine_ad53f3413fd15db5258446e997071714",
        "refinement_interpretation_Tm_refine_c1f80bc31cbe9b996d4b2f695bb8d54d",
        "refinement_interpretation_Tm_refine_da1b0dfb8283502ec162998a8bbb6431"
      ],
      0,
      "e16ac42a3aa4444243297490e08beea2"
    ],
    [
      "MerkleTree.New.High.Correct.Flushing.mt_flush_to_merge_preserved",
      3,
      2,
      1,
      [
        "@MaxFuel_assumption", "@MaxIFuel_assumption",
        "@fuel_correspondence_MerkleTree.New.High.Correct.Base.merge_hs.fuel_instrumented",
        "@fuel_correspondence_MerkleTree.New.High.Correct.Base.mt_olds_inv.fuel_instrumented",
        "@fuel_correspondence_MerkleTree.New.High.Correct.Flushing.mt_flush_to_olds.fuel_instrumented",
        "@fuel_correspondence_MerkleTree.New.High.hs_wf_elts.fuel_instrumented",
        "@fuel_correspondence_MerkleTree.New.High.mt_flush_to_.fuel_instrumented",
        "@fuel_correspondence_Prims.pow2.fuel_instrumented",
        "@fuel_irrelevance_MerkleTree.New.High.Correct.Base.mt_olds_inv.fuel_instrumented",
        "@fuel_irrelevance_MerkleTree.New.High.Correct.Flushing.mt_flush_to_olds.fuel_instrumented",
        "@fuel_irrelevance_MerkleTree.New.High.hs_wf_elts.fuel_instrumented",
        "@fuel_irrelevance_MerkleTree.New.High.mt_flush_to_.fuel_instrumented",
        "@fuel_irrelevance_Prims.pow2.fuel_instrumented", "@query",
        "Prims_pretyping_ae567c2fb75be05905677af440075565",
        "binder_x_0e34d6ba5aadb6ae8199afa904b3bbdb_7",
        "binder_x_1efd3135b389a1c7e3a2fc82df2bbe21_5",
        "binder_x_20ef783cabfdc90ae174ed55c128717b_4",
        "binder_x_5e20d151293c9e40e5203cbcff29aebe_1",
        "binder_x_a3a9d1e443789a10c20ec8f7e2fe66e3_2",
        "binder_x_a781c67b3813f82607f5722fcf0c9c76_6",
        "binder_x_bb4e1c9af0265270f8e7a5f250f730e2_3",
        "binder_x_f26957a7e62b271a8736230b1e9c83c1_0", "bool_inversion",
        "constructor_distinct_FStar.Integers.W16",
        "constructor_distinct_FStar.Integers.W31",
        "constructor_distinct_FStar.Integers.W8",
        "constructor_distinct_Lib.IntTypes.U32", "eq2-interp",
        "equality_tok_FStar.Integers.W16@tok",
        "equality_tok_FStar.Integers.W31@tok",
        "equality_tok_FStar.Integers.W8@tok",
        "equality_tok_Lib.IntTypes.U32@tok", "equality_tok_Prims.LexTop@tok",
        "equation_Lib.IntTypes.bits", "equation_Lib.IntTypes.unsigned",
        "equation_MerkleTree.New.High.hash",
        "equation_MerkleTree.New.High.hashes",
        "equation_MerkleTree.New.High.hashess",
        "equation_MerkleTree.New.High.offset_of", "equation_Prims.eqtype",
        "equation_Prims.nat", "equation_Prims.pos",
        "equation_Spec.Poly1305.size_key",
        "equation_with_fuel_MerkleTree.New.High.Correct.Base.mt_olds_inv.fuel_instrumented",
        "equation_with_fuel_MerkleTree.New.High.Correct.Flushing.mt_flush_to_olds.fuel_instrumented",
        "equation_with_fuel_MerkleTree.New.High.hs_wf_elts.fuel_instrumented",
        "equation_with_fuel_MerkleTree.New.High.mt_flush_to_.fuel_instrumented",
        "equation_with_fuel_Prims.pow2.fuel_instrumented",
        "function_token_typing_Prims.__cache_version_number__",
        "function_token_typing_Prims.int",
        "haseqTm_refine_542f9d4f129664613f2483a6c88bc7c2", "int_inversion",
        "int_typing", "l_and-interp", "lemma_FStar.Seq.Base.lemma_eq_elim",
        "lemma_FStar.Seq.Base.lemma_eq_intro",
        "lemma_FStar.Seq.Base.lemma_eq_refl",
        "lemma_FStar.Seq.Base.lemma_index_app1",
        "lemma_FStar.Seq.Base.lemma_index_app2",
        "lemma_FStar.Seq.Base.lemma_index_slice",
        "lemma_FStar.Seq.Base.lemma_index_upd1",
        "lemma_FStar.Seq.Base.lemma_len_append",
        "lemma_FStar.Seq.Base.lemma_len_slice",
        "lemma_FStar.Seq.Base.lemma_len_upd",
        "lemma_FStar.Seq.Properties.slice_upd",
        "lemma_FStar.UInt.pow2_values",
        "lemma_MerkleTree.New.High.seq_slice_equal_index",
        "primitive_Prims.op_Addition", "primitive_Prims.op_AmpAmp",
        "primitive_Prims.op_Division", "primitive_Prims.op_Equality",
        "primitive_Prims.op_LessThan", "primitive_Prims.op_LessThanOrEqual",
        "primitive_Prims.op_Modulus", "primitive_Prims.op_Multiply",
        "primitive_Prims.op_Subtraction",
        "projection_inverse_BoxBool_proj_0",
        "projection_inverse_BoxInt_proj_0",
        "projection_inverse_FStar.Integers.Signed__0",
        "projection_inverse_FStar.Integers.Unsigned__0",
        "refinement_interpretation_Tm_refine_0545ca68af3b2fc8df509fb388f7f2ee",
        "refinement_interpretation_Tm_refine_0ec011aea9f93256a3547ad9f0c667f1",
        "refinement_interpretation_Tm_refine_11ff5223149858a6ed39dcb0f334332c",
        "refinement_interpretation_Tm_refine_16113b670c3948241b38ee17f4d8fb91",
        "refinement_interpretation_Tm_refine_27e93fd1252ffee400912afd0e77b1ba",
        "refinement_interpretation_Tm_refine_2ca062977a42c36634b89c1c4f193f79",
        "refinement_interpretation_Tm_refine_35a0739c434508f48d0bb1d5cd5df9e8",
        "refinement_interpretation_Tm_refine_39ebebc5ab51b137958cb84dd3124492",
        "refinement_interpretation_Tm_refine_3d93e3571976634af2ba31f6b362fa73",
        "refinement_interpretation_Tm_refine_414d0a9f578ab0048252f8c8f552b99f",
        "refinement_interpretation_Tm_refine_4d0ab6134173bbad75f08ef14247f657",
        "refinement_interpretation_Tm_refine_525e2cd43135714caa80f1c1c548dbc5",
        "refinement_interpretation_Tm_refine_527e8dd31becd17d6b7d9df3614c9953",
        "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2",
        "refinement_interpretation_Tm_refine_5664991902867dbaea8455604edd6227",
        "refinement_interpretation_Tm_refine_5a8634b460d149c76a5c0476662af1d0",
        "refinement_interpretation_Tm_refine_5e6b6c893e428236439de5e59c175f5e",
        "refinement_interpretation_Tm_refine_72a6e6d3eb60f86cdad2dd40aa09f653",
        "refinement_interpretation_Tm_refine_774ba3f728d91ead8ef40be66c9802e5",
        "refinement_interpretation_Tm_refine_7d7fbea8a1aa1c987d727318058634ac",
        "refinement_interpretation_Tm_refine_81407705a0828c2c1b1976675443f647",
        "refinement_interpretation_Tm_refine_9b2b3e7ac5f300ddc6add4181948ef22",
        "refinement_interpretation_Tm_refine_ac201cf927190d39c033967b63cb957b",
        "refinement_interpretation_Tm_refine_ad53f3413fd15db5258446e997071714",
        "refinement_interpretation_Tm_refine_bf3340443d6edf0ae4bc4b37060534fb",
        "refinement_interpretation_Tm_refine_c1f80bc31cbe9b996d4b2f695bb8d54d",
        "refinement_interpretation_Tm_refine_d022e51698263de0859911b2eaa8436b",
        "refinement_interpretation_Tm_refine_d3d07693cd71377864ef84dc97d10ec1",
        "refinement_interpretation_Tm_refine_d83f8da8ef6c1cb9f71d1465c1bb1c55",
        "refinement_interpretation_Tm_refine_da1b0dfb8283502ec162998a8bbb6431",
        "refinement_interpretation_Tm_refine_dfd7831358eafa1a0f79e4e16bc4f710",
        "refinement_interpretation_Tm_refine_e99fe37fcae52518316cc3ec1338b5f4",
        "token_correspondence_Prims.pow2.fuel_instrumented",
        "typing_FStar.Seq.Base.append", "typing_FStar.Seq.Base.length",
        "typing_FStar.Seq.Base.slice", "typing_Lib.IntTypes.unsigned",
        "typing_MerkleTree.New.High.Correct.Base.merge_hs",
        "typing_MerkleTree.New.High.Correct.Flushing.mt_flush_to_olds",
        "typing_MerkleTree.New.High.hash",
        "typing_MerkleTree.New.High.hashes",
        "typing_MerkleTree.New.High.mt_flush_to_",
        "typing_MerkleTree.New.High.offset_of",
        "typing_Spec.Poly1305.size_key", "typing_tok_Lib.IntTypes.U32@tok",
        "well-founded-ordering-on-nat"
      ],
      0,
      "733f545591c9ed6c61a129651542156c"
    ],
    [
      "MerkleTree.New.High.Correct.Flushing.mt_flush_to_inv_preserved_",
      1,
      2,
      1,
      [
        "@MaxIFuel_assumption", "@query", "equation_Prims.nat",
        "equation_Prims.pos", "int_inversion",
        "primitive_Prims.op_Subtraction", "projection_inverse_BoxInt_proj_0",
        "refinement_interpretation_Tm_refine_3d93e3571976634af2ba31f6b362fa73",
        "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2",
        "refinement_interpretation_Tm_refine_5664991902867dbaea8455604edd6227",
        "refinement_interpretation_Tm_refine_774ba3f728d91ead8ef40be66c9802e5",
        "refinement_interpretation_Tm_refine_ad53f3413fd15db5258446e997071714",
        "refinement_interpretation_Tm_refine_c1f80bc31cbe9b996d4b2f695bb8d54d",
        "refinement_interpretation_Tm_refine_da1b0dfb8283502ec162998a8bbb6431"
      ],
      0,
      "661df57105ef13d64b5ba47e5ca0a164"
    ],
    [
      "MerkleTree.New.High.Correct.Flushing.mt_flush_to_inv_preserved_",
      2,
      2,
      1,
      [
        "@MaxIFuel_assumption", "@query", "equation_Prims.nat",
        "int_inversion", "primitive_Prims.op_Subtraction",
        "projection_inverse_BoxInt_proj_0",
        "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2",
        "refinement_interpretation_Tm_refine_ad53f3413fd15db5258446e997071714",
        "refinement_interpretation_Tm_refine_da1b0dfb8283502ec162998a8bbb6431"
      ],
      0,
      "129594fef91e1b7b20352f82b51446e6"
    ],
    [
      "MerkleTree.New.High.Correct.Flushing.mt_flush_to_inv_preserved_",
      3,
      2,
      1,
      [
        "@MaxFuel_assumption", "@MaxIFuel_assumption",
        "@fuel_correspondence_MerkleTree.New.High.Correct.Base.merge_hs.fuel_instrumented",
        "@fuel_correspondence_MerkleTree.New.High.Correct.Flushing.mt_flush_to_olds.fuel_instrumented",
        "@fuel_correspondence_MerkleTree.New.High.mt_flush_to_.fuel_instrumented",
        "@query", "constructor_distinct_Lib.IntTypes.U8",
        "equality_tok_Lib.IntTypes.U1@tok",
        "equality_tok_Lib.IntTypes.U8@tok", "equation_Lib.IntTypes.unsigned",
        "equation_MerkleTree.New.High.Correct.Base.mt_olds_hs_inv",
        "equation_MerkleTree.New.High.hashes",
        "equation_MerkleTree.New.High.hashess", "equation_Prims.nat",
        "equation_Prims.pos", "equation_Spec.AES.gf8",
        "equation_Spec.AES.irred", "equation_Spec.GaloisField.gf",
        "equation_Spec.Poly1305.size_key",
        "equation_with_fuel_MerkleTree.New.High.Correct.Flushing.mt_flush_to_olds.fuel_instrumented",
        "int_inversion", "lemma_FStar.Seq.Base.lemma_eq_elim",
        "lemma_FStar.Seq.Base.lemma_eq_refl",
        "primitive_Prims.op_LessThanOrEqual",
        "proj_equation_Spec.GaloisField.GF_t",
        "projection_inverse_BoxBool_proj_0",
        "projection_inverse_Spec.GaloisField.GF_t",
        "refinement_interpretation_Tm_refine_0ec011aea9f93256a3547ad9f0c667f1",
        "refinement_interpretation_Tm_refine_3d93e3571976634af2ba31f6b362fa73",
        "refinement_interpretation_Tm_refine_4d0ab6134173bbad75f08ef14247f657",
        "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2",
        "refinement_interpretation_Tm_refine_5664991902867dbaea8455604edd6227",
        "refinement_interpretation_Tm_refine_72a6e6d3eb60f86cdad2dd40aa09f653",
        "refinement_interpretation_Tm_refine_774ba3f728d91ead8ef40be66c9802e5",
        "refinement_interpretation_Tm_refine_81407705a0828c2c1b1976675443f647",
        "refinement_interpretation_Tm_refine_91f118064a596fa16be224abb038f756",
        "refinement_interpretation_Tm_refine_ad53f3413fd15db5258446e997071714",
        "refinement_interpretation_Tm_refine_bf3340443d6edf0ae4bc4b37060534fb",
        "refinement_interpretation_Tm_refine_c1f80bc31cbe9b996d4b2f695bb8d54d",
        "refinement_interpretation_Tm_refine_da1b0dfb8283502ec162998a8bbb6431",
        "refinement_interpretation_Tm_refine_de8080fdc4bd6678af723874a7d70466",
        "typing_FStar.Seq.Base.slice",
        "typing_MerkleTree.New.High.Correct.Flushing.mt_flush_to_olds",
        "typing_MerkleTree.New.High.hashes", "typing_Spec.AES.gf8",
        "typing_Spec.GaloisField.__proj__GF__item__t",
        "typing_Spec.Poly1305.size_key"
      ],
      0,
      "f3a66c59b3c3ef9414ec4c4a4a6f0204"
    ],
    [
      "MerkleTree.New.High.Correct.Flushing.mt_flush_to_inv_preserved",
      1,
      2,
      1,
      [
        "@MaxIFuel_assumption", "@query",
        "equation_MerkleTree.New.High.mt_flush_to",
        "equation_MerkleTree.New.High.mt_wf_elts",
        "fuel_guarded_inversion_MerkleTree.New.High.merkle_tree",
        "primitive_Prims.op_LessThan",
        "proj_equation_MerkleTree.New.High.MT_hs",
        "proj_equation_MerkleTree.New.High.MT_i",
        "proj_equation_MerkleTree.New.High.MT_j",
        "projection_inverse_BoxBool_proj_0",
        "projection_inverse_MerkleTree.New.High.MT_i",
        "refinement_interpretation_Tm_refine_7f59e1d21662a5bb0549ee09247e1710",
        "refinement_interpretation_Tm_refine_881298fb0dff2db17e4149fcf49ad4b9",
        "refinement_interpretation_Tm_refine_d022e51698263de0859911b2eaa8436b",
        "refinement_interpretation_Tm_refine_db428869743ec15a24716674df186f66",
        "typing_MerkleTree.New.High.__proj__MT__item__hs",
        "typing_MerkleTree.New.High.__proj__MT__item__j"
      ],
      0,
      "1d87c9193044fd8f196ed10873b96a1b"
    ],
    [
      "MerkleTree.New.High.Correct.Flushing.mt_flush_to_inv_preserved",
      2,
      2,
      1,
      [
        "@MaxIFuel_assumption",
        "@fuel_correspondence_MerkleTree.New.High.Correct.Base.merge_hs.fuel_instrumented",
        "@fuel_correspondence_MerkleTree.New.High.Correct.Flushing.mt_flush_to_olds.fuel_instrumented",
        "@fuel_correspondence_MerkleTree.New.High.mt_flush_to_.fuel_instrumented",
        "@query", "equation_FStar.Seq.Properties.head",
        "equation_MerkleTree.New.High.Correct.Base.mt_base",
        "equation_MerkleTree.New.High.Correct.Base.mt_inv",
        "equation_MerkleTree.New.High.Correct.Base.mt_spec",
        "equation_MerkleTree.New.High.hashes",
        "equation_MerkleTree.New.High.hashess",
        "equation_MerkleTree.New.High.mt_flush_to",
        "equation_MerkleTree.New.High.mt_wf_elts", "equation_Prims.nat",
        "fuel_guarded_inversion_MerkleTree.New.High.merkle_tree",
        "int_typing", "l_and-interp", "lemma_FStar.Seq.Base.lemma_eq_elim",
        "primitive_Prims.op_LessThan", "primitive_Prims.op_Subtraction",
        "proj_equation_MerkleTree.New.High.MT_hash_fun",
        "proj_equation_MerkleTree.New.High.MT_hs",
        "proj_equation_MerkleTree.New.High.MT_i",
        "proj_equation_MerkleTree.New.High.MT_j",
        "proj_equation_MerkleTree.New.High.MT_mroot",
        "proj_equation_MerkleTree.New.High.MT_rhs",
        "proj_equation_MerkleTree.New.High.MT_rhs_ok",
        "projection_inverse_BoxBool_proj_0",
        "projection_inverse_BoxInt_proj_0",
        "projection_inverse_MerkleTree.New.High.MT_hash_fun",
        "projection_inverse_MerkleTree.New.High.MT_hs",
        "projection_inverse_MerkleTree.New.High.MT_i",
        "projection_inverse_MerkleTree.New.High.MT_j",
        "projection_inverse_MerkleTree.New.High.MT_mroot",
        "projection_inverse_MerkleTree.New.High.MT_rhs",
        "projection_inverse_MerkleTree.New.High.MT_rhs_ok",
        "refinement_interpretation_Tm_refine_3d93e3571976634af2ba31f6b362fa73",
        "refinement_interpretation_Tm_refine_4d0ab6134173bbad75f08ef14247f657",
        "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2",
        "refinement_interpretation_Tm_refine_5664991902867dbaea8455604edd6227",
        "refinement_interpretation_Tm_refine_7f59e1d21662a5bb0549ee09247e1710",
        "refinement_interpretation_Tm_refine_881298fb0dff2db17e4149fcf49ad4b9",
        "refinement_interpretation_Tm_refine_995516c5fe04fd93611e610195bbf9ba",
        "refinement_interpretation_Tm_refine_9b2b3e7ac5f300ddc6add4181948ef22",
        "refinement_interpretation_Tm_refine_ad53f3413fd15db5258446e997071714",
        "refinement_interpretation_Tm_refine_bf3340443d6edf0ae4bc4b37060534fb",
        "refinement_interpretation_Tm_refine_c1f80bc31cbe9b996d4b2f695bb8d54d",
        "refinement_interpretation_Tm_refine_d022e51698263de0859911b2eaa8436b",
        "refinement_interpretation_Tm_refine_da1b0dfb8283502ec162998a8bbb6431",
        "refinement_interpretation_Tm_refine_db428869743ec15a24716674df186f66",
        "true_interp", "typing_MerkleTree.New.High.Correct.Base.merge_hs",
        "typing_MerkleTree.New.High.Correct.Flushing.mt_flush_to_olds",
        "typing_MerkleTree.New.High.__proj__MT__item__hash_fun",
        "typing_MerkleTree.New.High.__proj__MT__item__hs",
        "typing_MerkleTree.New.High.__proj__MT__item__i",
        "typing_MerkleTree.New.High.__proj__MT__item__j",
        "typing_MerkleTree.New.High.hashes",
        "typing_MerkleTree.New.High.mt_flush_to"
      ],
      0,
      "9c9798ad1fb1b90b70a5eff3fa3d0769"
    ],
    [
      "MerkleTree.New.High.Correct.Flushing.mt_flush_inv_preserved",
      1,
      2,
      1,
      [
        "@MaxIFuel_assumption", "@query",
        "equation_MerkleTree.New.High.mt_flush",
        "equation_MerkleTree.New.High.mt_flush_to",
        "equation_MerkleTree.New.High.mt_wf_elts", "equation_Prims.nat",
        "primitive_Prims.op_LessThan", "primitive_Prims.op_Subtraction",
        "proj_equation_MerkleTree.New.High.MT_hash_fun",
        "proj_equation_MerkleTree.New.High.MT_hs",
        "proj_equation_MerkleTree.New.High.MT_i",
        "proj_equation_MerkleTree.New.High.MT_j",
        "proj_equation_MerkleTree.New.High.MT_rhs_ok",
        "projection_inverse_BoxBool_proj_0",
        "projection_inverse_BoxInt_proj_0",
        "projection_inverse_MerkleTree.New.High.MT_i",
        "refinement_interpretation_Tm_refine_35cb22bdedbebf7b43fef791c588be43",
        "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2",
        "refinement_interpretation_Tm_refine_881298fb0dff2db17e4149fcf49ad4b9",
        "refinement_interpretation_Tm_refine_d022e51698263de0859911b2eaa8436b",
        "typing_MerkleTree.New.High.__proj__MT__item__hs",
        "typing_MerkleTree.New.High.__proj__MT__item__i",
        "typing_MerkleTree.New.High.__proj__MT__item__j"
      ],
      0,
      "98e68231480db44bc9007b4f3f773db3"
    ],
    [
      "MerkleTree.New.High.Correct.Flushing.mt_flush_inv_preserved",
      2,
      2,
      1,
      [
        "@MaxIFuel_assumption", "@query",
        "equation_MerkleTree.New.High.mt_flush", "equation_Prims.nat",
        "fuel_guarded_inversion_MerkleTree.New.High.merkle_tree",
        "primitive_Prims.op_Subtraction",
        "proj_equation_MerkleTree.New.High.MT_i",
        "proj_equation_MerkleTree.New.High.MT_j",
        "projection_inverse_BoxInt_proj_0",
        "refinement_interpretation_Tm_refine_35cb22bdedbebf7b43fef791c588be43",
        "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2",
        "typing_MerkleTree.New.High.__proj__MT__item__i"
      ],
      0,
      "594c98cc4669e6b12f7ba3bdbb722884"
    ]
  ]
]