| avols[v][m] = mapped(buf, m0), m < # avols[v], ebm-cons(avols), v ∈ avols ⊦ is-aligned(m0, EB_PAGE_SIZE) |
avols[v][m] = mapped(buf, m0), m < # avols[v], ebm-cons(avols), v ∈ avols ⊦ is-aligned(m0, EB_PAGE_SIZE)
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic