| # gndx1 = # lax1, inv(groupblock(gndx0 + gndx1, lax0 + lax1, m)) ⊦ # gndx0 = # lax0 |
⊦ inv(gblock) ↔ # gblock.gndlist = # gblock.ladrlist ∧ inv-flashsize(gblock.gndlist, gblock.ladrlist) ∧ ¬ dups(gblock.ladrlist)
Used simplifier rules: ⊦ groupblock(gndx, lax, m).gndlist = gndx; (s)% ⊦ #(gndx + gndx0) = # gndx + # gndx0; (s)%a: ⊦ (gndx + gndx0) + gndx1 = gndx + gndx0 + gndx1; from specification list[group-store]% ⊦ groupblock(gndx, lax, m).ladrlist = lax; (s)% ⊦ #(lax + lax0) = # lax + # lax0; (s)%a: ⊦ (lax + lax0) + lax1 = lax + lax0 + lax1; from specification list[laddress-list]%a: ⊦ ¬ dups(lax + lax0) → ¬ dups(lax) ∧ ¬ dups(lax0); (forward) from specification list-dup[laddress-list]% ⊦ m + n = m + n0 ↔ n = n0; (s)%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic%c: ⊦ m + n = n + m; from specification nat-basic Used terms: groupblock(gndx0 + gndx1, lax0 + lax1, m)