Tighter bound on decomp_window_index.
Added one necessary binding invariant.
Discharged some proofs.