| remove-refsize0(gstore1) = gstore1, remove-refsize0(istore1) = istore1, elems nx ∩ ginval2 = ∅, dom gstore1 ∪ elems nx = dom gstore2 ∪ ginval2, btree-inv(rp, adr, istore2, istore1, zh, ri, fi), inv(gstore2 \ ginval2), inv(gstore1), inv(istore2), inv(istore1), istore1 ⊑ istore2, pstate.journal? → nx ≠ [] ∧ pstate.lnum = nx.last ∧ pstate.lnum ∈ gstore2, pstate.index? → pstate.lnum ∈ istore2 ⊦ pstate = unbuffered, pstate = readonly, dups(nx), ∃ err0. ⌊err0⌋ ∨ err0 = ESUCCESS |
Used simplifier rules: ⊦ ESUCCESS ≠ ECOMMIT; (s)% ⊦ ⌊ECOMMIT⌋ ; (s) Used terms: ECOMMIT