| avol0 = avol, m = n, n < # avol, ebm-vol-inv(avol), is-encoded-pad(orphans0, # orphans0, buf0), # buf0 ≤ LEB_SIZE ⊦ [fail_or_success#(; ; err); if err = ESUCCESS then avol[m] := mapped(mkbuf(0)) else {skip or avol[m] := unmapped}] ( ebm-vol-inv(avol) → ⟪if err = ESUCCESS then ebm_avol_write#(n, 0, 0, # buf0, buf0; avol; err)⟫ ( (err = ESUCCESS ∨ ⌊err⌋ ) ∧ ebm-vol-inv(avol) ∧ id○(avol, avol0, n) ∧ (err = ESUCCESS → avol[n].mapped? ∧ is-encoded-pad(orphans0, # orphans0, avol[n].data)))) |
n < # avol, ebm-vol-inv(avol), is-encoded-pad(orphans0, # orphans0, buf0), # buf0 ≤ LEB_SIZE ⊦ [fail_or_success#(; ; err); avol0 := avol; if err = ESUCCESS then avol[n] := mapped(mkbuf(0)) else {skip or avol[n] := unmapped}] ( ebm-vol-inv(avol) → ⟪if err = ESUCCESS then ebm_avol_write#(n, 0, 0, # buf0, buf0; avol; err)⟫ ( (err = ESUCCESS ∨ ⌊err⌋ ) ∧ ebm-vol-inv(avol) ∧ id○(avol, avol0, n) ∧ (err = ESUCCESS → avol[n].mapped? ∧ is-encoded-pad(orphans0, # orphans0, avol[n].data))))