| avols = avols0[v, avols0[v][m, unmapped]], v = default-volid, m < # avols0[default-volid], m < # avols0[v], ebm-cons(avols0), default-volid ∈ avols0, v ∈ avols0 ⊦ ⟪ebm_map#(default-volid, m; avols; err)⟫ (default-volid ∈ avols ∧ ebm-cons(avols)) |
avols = avols0[default-volid, avols0[default-volid][m, unmapped]], m < # avols0[default-volid], ebm-cons(avols0), default-volid ∈ avols0 ⊦ ⟪ebm_map#(default-volid, m; avols; err)⟫ (default-volid ∈ avols ∧ ebm-cons(avols))
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic