def set.sub_minus

bend-osdev-caps@0.1.0.0 · PROOF.bend:647

import Base
import bend-osdev-caps@0.1.0.0/caps.bend as C

647def set.sub_minus(+x: C.CapSet(), +y: C.CapSet()) -> {C.CapSet.subset(C.CapSet.minus(x, y), x) == True{} : Bool}:
648  match x y:
649    case C.CapSetW{U32{+xl}, +xh} C.CapSetW{U32{+yl}, +yh}:
650      set.sub_intro(Word.and(32n, xl, Word.not(32n, yl)), xl, Word.and(9n, xh, Word.not(9n, yh)), xh)(bits.sub_minus(32n, xl, yl))(bits.sub_minus(9n, xh, yh))