| # lpt0 = # avol, adr = adr0, lpt = lpt0, m = m0, ns = ns0, plog = plog0, ebm-vol-inv(avol), avol ⊆ avol0 ⊦ ⟪apersistence_io_recover#(; adr1, m1, ns1, log, lpt1, adr, m, plog, lpt, ns, avol0; err)⟫ (err = ESUCCESS → ebm-vol-inv(avol0) ∧ # lpt = # avol0) |
# lpt0 = # avol, ebm-vol-inv(avol), avol ⊆ avol0 ⊦ ⟪apersistence_io_recover#(; adr1, m1, ns1, log, lpt1, adr, m, plog, lpt0, ns, avol0; err)⟫ (err = ESUCCESS → ebm-vol-inv(avol0) ∧ # lpt0 = # avol0)