| sb = mksb(adr0, m2, m4, m5, m7, m8, m9), err = ESUCCESS → disk-layout(sb, # lpt) ∧ m9 + # lpt = # avol ∧ avol[0].mapped? ∧ is-encoded(sb, avol[0].data) ∧ avol[m5].mapped? ∧ is-encoded-pad(orphans, m7, avol[m5].data) ∧ avol[m4].mapped? ∧ (logoff ≠ LEB_SIZE → # avol[m4].data = logoff) ∧ is-encoded(log, avol[m4].data) ∧ mapped-full?(avol, m8, lptlebs(# lpt, LEB_SIZE)) ∧ is-encoded(lpt, lebs(avol, m8, lptlebs(# lpt, LEB_SIZE))) ∧ m0 = EB_PAGE_SIZE ∧ m = LEB_SIZE ∧ ebm-vol-inv(avol), err = ESUCCESS → adr0 = adr1 ∧ m2 = m3 ∧ subarray(avol, m9, # avol - m9) = fill(mkavolume(# lpt0), unmapped) ∧ is-encoded(lpt0, lebs(avol, m8, lptlebs(# avol - m9, LEB_SIZE))) ∧ avol[m4].data = mkbuf(0) ∧ avol[m5].data = mkbuf(0), err = ESUCCESS ∨ ⌊err⌋ ⊦ ( err = ESUCCESS → ⟨apersistence_io_format#(# lpt0, LEB_SIZE, lpt0, adr1, m3; ; adr2, m6, plog, avol1, lpt1, ns0, err0)⟩ ( m6 = m2 ∧ adr2 = adr0 ∧ # avol = m9 + (# avol - m9) ∧ avol1 = subarray(avol, m9, # avol - m9) ∧ is-encoded(plog, avol[m4].data) ∧ is-encoded(lpt1, lebs(avol, m8, lptlebs(# avol - m9, LEB_SIZE))) ∧ is-encoded-pad(ns0, m7, avol[m5].data) ∧ ESUCCESS = err0)) ∧ ( err ≠ ESUCCESS → ⟨apersistence_io_format#(# lpt0, LEB_SIZE, lpt0, adr1, m3; ; adr2, m6, plog, avol1, lpt1, ns0, err0)⟩ (adr = adr2 ∧ m1 = m6 ∧ log0 = plog ∧ avol0 = avol1 ∧ lpt2 = lpt1 ∧ ns = ns0 ∧ err = err0)) |
err = ESUCCESS → adr0 = adr1 ∧ m2 = m3 ∧ subarray(avol, m9, # avol - m9) = fill(mkavolume(# lpt0), unmapped) ∧ is-encoded(lpt0, lebs(avol, m8, lptlebs(# avol - m9, LEB_SIZE))) ∧ avol[m4].data = mkbuf(0) ∧ avol[m5].data = mkbuf(0), err = ESUCCESS → disk-layout(mksb(adr0, m2, m4, m5, m7, m8, m9), # lpt) ∧ m9 + # lpt = # avol ∧ avol[0].mapped? ∧ is-encoded(mksb(adr0, m2, m4, m5, m7, m8, m9), avol[0].data) ∧ avol[m5].mapped? ∧ is-encoded-pad(orphans, m7, avol[m5].data) ∧ avol[m4].mapped? ∧ (logoff ≠ LEB_SIZE → # avol[m4].data = logoff) ∧ is-encoded(log, avol[m4].data) ∧ mapped-full?(avol, m8, lptlebs(# lpt, LEB_SIZE)) ∧ is-encoded(lpt, lebs(avol, m8, lptlebs(# lpt, LEB_SIZE))) ∧ m0 = EB_PAGE_SIZE ∧ m = LEB_SIZE ∧ ebm-vol-inv(avol), err = ESUCCESS ∨ ⌊err⌋ ⊦ ( err = ESUCCESS → ⟨apersistence_io_format#(# lpt0, LEB_SIZE, lpt0, adr1, m3; ; adr2, m6, plog, avol1, lpt1, ns0, err0)⟩ ( m6 = m2 ∧ adr2 = adr0 ∧ # avol = m9 + (# avol - m9) ∧ avol1 = subarray(avol, m9, # avol - m9) ∧ is-encoded(plog, avol[m4].data) ∧ is-encoded(lpt1, lebs(avol, m8, lptlebs(# avol - m9, LEB_SIZE))) ∧ is-encoded-pad(ns0, m7, avol[m5].data) ∧ ESUCCESS = err0)) ∧ ( err ≠ ESUCCESS → ⟨apersistence_io_format#(# lpt0, LEB_SIZE, lpt0, adr1, m3; ; adr2, m6, plog, avol1, lpt1, ns0, err0)⟩ (adr = adr2 ∧ m1 = m6 ∧ log0 = plog ∧ avol0 = avol1 ∧ lpt2 = lpt1 ∧ ns = ns0 ∧ err = err0))