| LEB_SIZE = n0 + # buf1, avol[0] = mapped(buf1), ebm-vol-inv(avol), is-encoded(sb, subarray(buf1 + mkempbuf(n0), 0, encoding-size(sb, EB_PAGE_SIZE))), is-encoded(sb0, buf1), encoding-size(sb, EB_PAGE_SIZE) ≤ # buf1 + n0, # buf1 ≤ LEB_SIZE, LEB_SIZE ≤ # buf1 + n0 ⊦ # avol = 0, sb = sb0 |
LEB_SIZE = n0 + # buf1, avol[0] = mapped(buf1), ebm-vol-inv(avol), is-encoded(sb, subarray(buf1 + mkempbuf(n0), 0, encoding-size(sb, EB_PAGE_SIZE))), is-encoded(sb0, buf1), encoding-size(sb, EB_PAGE_SIZE) ≤ LEB_SIZE, # buf1 ≤ LEB_SIZE ⊦ # avol = 0, sb = sb0
Used simplifier rules: ⊦ m ≤ m; (s)%let: ⊦ n ≤ n0 ∧ n0 ≤ n1 → n ≤ n1; (forward) from specification nat%c: ⊦ m + n = n + m; from specification nat-basic