| remove-refsize0(gstore1) = gstore1, elems nx1 ∩ jro4 = ∅, dom gstore1 ∪ elems nx1 = dom gstore2 ∪ jro4, jro2 < jmaxino3, jro1 < jmaxino1, fi1.inos < jmaxino3, fi3.inos < jmaxino1, inv(gstore2 \ jro4), inv(gstore1), refsize-cons(gstore2, range fi1), refsize-cons(gstore1, range fi3), ri-inj(fi1), ri-inj(fi3), jmaxino1 ≤ jmaxino3, fi1.lebs ⊆ dom gstore2, fi3.lebs ⊆ dom gstore1, jvalid0 ∧ nx1 ≠ [] → valid-journal-head(nx1, gstore2, jro4) ⊦ jmaxino1 = 0, jmaxino3 = 0, dups(nx1), ∃ err0. ⌊err0⌋ ∨ err0 = ESUCCESS |
Used simplifier rules: ⊦ ESUCCESS ≠ ECOMMIT; (s)% ⊦ ⌊ECOMMIT⌋ ; (s) Used terms: ECOMMIT