Remark code_tail_bounds_1:
forall fn ofs c,
code_tail ofs fn c -> 0 <= ofs <= list_length_z fn.
Remark code_tail_bounds_2:
forall fn ofs i c,
code_tail ofs fn (i :: c) -> 0 <= ofs < list_length_z fn.

(* Specifications: *)
Lemma code_tail_next:
forall fn ofs i c,
code_tail ofs fn (i :: c) ->
code_tail (ofs + 1) fn c.
Lemma code_tail_next_int:
forall fn ofs i c,
list_length_z fn <= Ptrofs.max_unsigned ->
code_tail (Ptrofs.unsigned ofs) fn (i :: c) ->
code_tail (Ptrofs.unsigned (Ptrofs.add ofs Ptrofs.one)) fn c.