Remark code_tail_bounds_1:
  forall fn ofs c,
  code_tail ofs fn c -> 0 <= ofs <= list_length_z fn.Remark code_tail_bounds_2:
  forall fn ofs i c,
  code_tail ofs fn (i :: c) -> 0 <= ofs < list_length_z fn.

(* Specifications: *)
Lemma code_tail_next: forall fn ofs i c, code_tail ofs fn (i :: c) -> code_tail (ofs + 1) fn c.
Lemma code_tail_next_int: forall fn ofs i c, list_length_z fn <= Ptrofs.max_unsigned -> code_tail (Ptrofs.unsigned ofs) fn (i :: c) -> code_tail (Ptrofs.unsigned (Ptrofs.add ofs Ptrofs.one)) fn c.