pub fn extern_spec_std_time_Instant_saturating_duration_since(
self_: &Instant,
earlier: Instant,
) -> DurationExpand description
extern spec for ::std::time::Instant::saturating_duration_since
This is not a real function: its only use is for documentation.
terminates
ghost
ensures
self@ > earlier@ ==> result@ > 0ensures
self@ <= earlier@ ==> result@ == 0