| # lpt = # avol, m = sb.maxino, adr = sb.indexaddr, # avol0 = sb.main + # avol, avol = subarray(avol0, sb.main, # avol0 - sb.main), is-encoded(plog, avol0[sb.log].data), is-encoded(lpt0, lebs(avol0, sb.lpt, lptlebs(# avol, LEB_SIZE))), is-encoded-pad(ns, sb.orphsize, avol0[sb.orph].data), ebm-vol-inv(avol), # lpt0 = # avol, ∃ lpt, log, orphans. persistence-io-inv(sb, logoff, avol0, lpt, log, orphans), m0 = EB_PAGE_SIZE, m1 = LEB_SIZE, ebm-vol-inv(avol0), orphans = ns0, adr0 = adr1, m2 = m3 ⊦ ⟪persistence_io_commit#(lpt, adr0, m2, m0, m1; orphans, sb, avol0, logoff; err)⟫ ⟨apersistence_io_commit#(lpt, adr1, m3, avol; ns0, adr, m, plog, lpt0, ns; err0)⟩ ( ( m = sb.maxino ∧ adr = sb.indexaddr ∧ # avol0 = sb.main + # avol ∧ avol = subarray(avol0, sb.main, # avol0 - sb.main) ∧ is-encoded(plog, avol0[sb.log].data) ∧ is-encoded(lpt0, lebs(avol0, sb.lpt, lptlebs(# avol, LEB_SIZE))) ∧ is-encoded-pad(ns, sb.orphsize, avol0[sb.orph].data)) ∧ orphans = ns0 ∧ err = err0) |
# lpt0 = # avol, # avol0 = sb.main + # avol, # lpt = # avol, adr = sb.indexaddr, adr0 = adr1, avol = subarray(avol0, sb.main, # avol0 - sb.main), m = sb.maxino, m0 = EB_PAGE_SIZE, m1 = LEB_SIZE, m2 = m3, orphans = ns0, ebm-vol-inv(avol0), ebm-vol-inv(avol), is-encoded(lpt0, lebs(avol0, sb.lpt, lptlebs(# avol, LEB_SIZE))), is-encoded(plog, avol0[sb.log].data), is-encoded-pad(ns, sb.orphsize, avol0[sb.orph].data), ∃ lpt, log, orphans. persistence-io-inv(sb, logoff, avol0, lpt, log, orphans) ⊦ ⟪persistence_io_commit#(lpt, adr0, m2, m0, m1; orphans, sb, avol0, logoff; err)⟫ ⟨apersistence_io_commit#(lpt, adr1, m3, avol; ns0, adr, m, plog, lpt0, ns; err0)⟩ ( ( m = sb.maxino ∧ adr = sb.indexaddr ∧ # avol0 = sb.main + # avol ∧ avol = subarray(avol0, sb.main, # avol0 - sb.main) ∧ is-encoded(plog, avol0[sb.log].data) ∧ is-encoded(lpt0, lebs(avol0, sb.lpt, lptlebs(# avol, LEB_SIZE))) ∧ is-encoded-pad(ns, sb.orphsize, avol0[sb.orph].data)) ∧ orphans = ns0 ∧ err = err0)