| avol0 = avol, ebm-vol-inv(avol) ⊦ ⟪err := ENOSPC⟫ ( (err = ESUCCESS ∨ ⌊err⌋ ) ∧ ebm-vol-inv(avol) ∧ (err = ESUCCESS → id○(avol, avol0, 0) ∧ (∃ buf. is-encoded(sb, buf) ∧ avol[0] = mapped(buf))) ∧ (err ≠ ESUCCESS → avol = avol0)), # avol = 0, encoding-size(sb, EB_PAGE_SIZE) ≤ LEB_SIZE |
Used simplifier rules: ⊦ m ≤ n ↔ ¬ n < m; (ss)% ⊦ ESUCCESS ≠ ENOSPC; (s)% ⊦ ⌊ENOSPC⌋ ; (s)