[Imprint]
[Data Privacy Statement]
[E-Mail]
View
long theorem info
. View
the proof
. Back to
main index
. View
the specification
. View
theorem base summary
, View
theorem base listing
, the
used properties by spec
, the
dependency list
, the
symbol table
,
Theorem inv-change
v ∈ avols, v = default-volid, ebm-cons(avols), m < # avols[v], n ≤ LEB_SIZE, n ≤ # buf, is-aligned(n, EB_PAGE_SIZE) ⊦ ⟪ebm_vol_change#(m, n, buf, v; avols; err)⟫ (v ∈ avols ∧ ebm-cons(avols))
Type: A proof obligation
Validity: The proof is valid.
Features:
Comment:
Used by:
Used by units in proved state:
Proof exists?: Yes
View
the proof
Infos about the proof
Proved?: Yes
Interactions: 1
Proof steps: 16
Used lemmas:
change
,
Used spec theorems:
ebm-asm
/
inv-change
Used simplifier rules:
nat-basic
/
f
nat
/
ge
nat-basic
/
add-base
nat-basic
/
a
nat-basic
/
c
nat
/
lels-02
nat
/
lels-03
store
/abstract-volumes/
In-insert
array-copy
/buffer/
subarray-elim