| err = ESUCCESS → disk-layout(mksb(adr0, m2, m4, m5, m7, m8, m9), # lpt) ∧ m9 + # lpt = # avol ∧ avol[0].mapped? ∧ is-encoded(mksb(adr0, m2, m4, m5, m7, m8, m9), avol[0].data) ∧ avol[m5].mapped? ∧ is-encoded-pad(orphans, m7, avol[m5].data) ∧ avol[m4].mapped? ∧ (logoff ≠ LEB_SIZE → # avol[m4].data = logoff) ∧ is-encoded(log, avol[m4].data) ∧ mapped-full?(avol, m8, lptlebs(# lpt, LEB_SIZE)) ∧ is-encoded(lpt, lebs(avol, m8, lptlebs(# lpt, LEB_SIZE))) ∧ m0 = EB_PAGE_SIZE ∧ m = LEB_SIZE ∧ ebm-vol-inv(avol), err = ESUCCESS → adr0 = adr1 ∧ m2 = m3 ∧ subarray(avol, m9, # avol - m9) = fill(mkavolume(# lpt0), unmapped) ∧ is-encoded(lpt0, lebs(avol, m8, lptlebs(# avol - m9, LEB_SIZE))) ∧ avol[m4].data = mkbuf(0) ∧ avol[m5].data = mkbuf(0), err = ESUCCESS ∨ ⌊err⌋ ⊦ ⟨apersistence_io_format#(# lpt0, LEB_SIZE, lpt0, adr1, m3; ; adr2, m6, plog, avol1, lpt1, ns0, err0)⟩ (adr = adr2 ∧ m1 = m6 ∧ log0 = plog ∧ avol0 = avol1 ∧ lpt2 = lpt1 ∧ ns = ns0 ∧ err = err0), err = ESUCCESS |
⌊err⌋ ⊦ ⟨apersistence_io_format#(# lpt0, LEB_SIZE, lpt0, adr1, m3; ; adr2, m6, plog, avol1, lpt1, ns0, err0)⟩ (adr = adr2 ∧ m1 = m6 ∧ log0 = plog ∧ avol0 = avol1 ∧ lpt2 = lpt1 ∧ ns = ns0 ∧ err = err0)
Used simplifier rules: ⊦ ⌊err⌋ → err ≠ ESUCCESS; (s)