| avol = avol1[n, unmapped], avol0 = avol1, err = err0, n < # avol1, ebm-vol-inv(avol1), ebm-vol-inv(avol), is-encoded-pad(orphans0, # orphans0, buf0), # buf0 ≤ LEB_SIZE, ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ ⟪skip⟫ ( (err = ESUCCESS ∨ ⌊err⌋ ) ∧ ebm-vol-inv(avol) ∧ id○(avol, avol0, n) ∧ (err = ESUCCESS → avol[n].mapped? ∧ is-encoded-pad(orphans0, # orphans0, avol[n].data))), err = ESUCCESS |
Used simplifier rules: ⊦ ⌊err⌋ → err ≠ ESUCCESS; (s)% ⊦ id○(avol[n, aleb], avol0, n) ↔ id○(avol, avol0, n); (s)% ⊦ id○(avol, avol, n); (ss)