| remove-refsize0(gstore1) = gstore1, elems nx ∩ jro = ∅, dom gstore1 ∪ elems nx = dom gstore2 ∪ jro, p_os < pmaxino, fi2.inos < jmaxino, fi1.inos < pmaxino, inv(gstore2 \ jro), inv(gstore1), refsize-cons(gstore2, range fi2), refsize-cons(gstore1, range fi1), ri-inj(fi2), ri-inj(fi1), pmaxino ≤ jmaxino, fi2.lebs ⊆ dom gstore2, fi1.lebs ⊆ dom gstore1, jvalid1 ∧ nx ≠ [] → valid-journal-head(nx, gstore2, jro) ⊦ pmaxino = 0, dups(nx), ∃ err0. ⌊err0⌋ ∨ err0 = ESUCCESS |
Used simplifier rules: ⊦ ESUCCESS ≠ ECOMMIT; (s)% ⊦ ⌊ECOMMIT⌋ ; (s) Used terms: ECOMMIT