| ⊦ ⌜λ n. (n / VFS_PAGE_SIZE * VFS_PAGE_SIZE < n0 * VFS_PAGE_SIZE ∧ n / VFS_PAGE_SIZE ∈ content ⊃ content[n / VFS_PAGE_SIZE];zeropage) [n % VFS_PAGE_SIZE ] ⌝ = ⌜(λ n. (n / VFS_PAGE_SIZE ∈ content ⊃ content[n / VFS_PAGE_SIZE];zeropage)[n % VFS_PAGE_SIZE]) to n0 * VFS_PAGE_SIZE⌝ + σ⊥ |
⊦ σ = σ2 ↔ # σ = # σ2 ∧ (∀ n. ⌜n⌝ < # σ → σ[n] = σ2[n])
⊦ # ⌜λ n. (n / VFS_PAGE_SIZE * VFS_PAGE_SIZE < n0 * VFS_PAGE_SIZE ∧ n / VFS_PAGE_SIZE ∈ content ⊃ content[n / VFS_PAGE_SIZE];zeropage) [n % VFS_PAGE_SIZE ] ⌝ = #(⌜(λ n. (n / VFS_PAGE_SIZE ∈ content ⊃ content[n / VFS_PAGE_SIZE];zeropage)[n % VFS_PAGE_SIZE]) to n0 * VFS_PAGE_SIZE⌝ + σ⊥) ∧ (∀ n. ⌜n⌝ < # ⌜λ n. (n / VFS_PAGE_SIZE * VFS_PAGE_SIZE < n0 * VFS_PAGE_SIZE ∧ n / VFS_PAGE_SIZE ∈ content ⊃ content[n / VFS_PAGE_SIZE];zeropage) [n % VFS_PAGE_SIZE ] ⌝ → ⌜λ n. (n / VFS_PAGE_SIZE * VFS_PAGE_SIZE < n0 * VFS_PAGE_SIZE ∧ n / VFS_PAGE_SIZE ∈ content ⊃ content[n / VFS_PAGE_SIZE];zeropage) [n % VFS_PAGE_SIZE ] ⌝ [n ] = (⌜(λ n. (n / VFS_PAGE_SIZE ∈ content ⊃ content[n / VFS_PAGE_SIZE];zeropage)[n % VFS_PAGE_SIZE]) to n0 * VFS_PAGE_SIZE⌝ + σ⊥)[n])
Used terms: ⌜ (λ n. (n / VFS_PAGE_SIZE ∈ content ⊃ content[n / VFS_PAGE_SIZE] ;zeropage ) [n % VFS_PAGE_SIZE ]) to n0 * VFS_PAGE_SIZE ⌝ + σ⊥, ⌜λ n. ( n / VFS_PAGE_SIZE * VFS_PAGE_SIZE < n0 * VFS_PAGE_SIZE ∧ n / VFS_PAGE_SIZE ∈ content ⊃ content[n / VFS_PAGE_SIZE] ;zeropage ) [n % VFS_PAGE_SIZE ] ⌝