| # lpt = n0, # avol = n0 + m4, m4 + # lpt0 = # avol, avol[0] = mapped(buf), avol[m1] = mapped(buf0), avol[m0] = mapped(buf1), disk-layout(mksb(adr, m, m0, m1, m2, m3, m4), # lpt0), ebm-vol-inv(subarray(avol, m4, # lpt)), ebm-vol-inv(avol), is-encoded(log, buf1), is-encoded(lpt, lebs(avol, m3, lptlebs(# lpt, LEB_SIZE))), is-encoded(mksb(adr, m, m0, m1, m2, m3, m4), buf), is-encoded(lpt0, lebs(avol, m3, lptlebs(# lpt0, LEB_SIZE))), is-encoded-pad(orphans, m2, buf0), mapped-full?(avol, m3, lptlebs(# lpt0, LEB_SIZE)), m4 ≤ # avol, logoff ≠ LEB_SIZE → # buf1 = logoff ⊦ ⟪persistence_io_requires_commit#(logoff, LEB_SIZE; ; boolvar)⟫ ⟨apersistence_io_requires_commit#(adr, m, log, subarray(avol, m4, n0), lpt, orphans; ; boolvar0)⟩ (boolvar ↔ boolvar0) |
# avol = # lpt0 + m4, avol[0] = mapped(buf), avol[m1] = mapped(buf0), avol[m0] = mapped(buf1), disk-layout(mksb(adr, m, m0, m1, m2, m3, m4), # lpt0), ebm-vol-inv(subarray(avol, m4, # lpt0)), ebm-vol-inv(avol), is-encoded(log, buf1), is-encoded(lpt0, lebs(avol, m3, lptlebs(# lpt0, LEB_SIZE))), is-encoded(mksb(adr, m, m0, m1, m2, m3, m4), buf), is-encoded-pad(orphans, m2, buf0), mapped-full?(avol, m3, lptlebs(# lpt0, LEB_SIZE)), m4 ≤ # avol, logoff ≠ LEB_SIZE → # buf1 = logoff ⊦ ⟪persistence_io_requires_commit#(logoff, LEB_SIZE; ; boolvar)⟫ ⟨apersistence_io_requires_commit#(adr, m, log, subarray(avol, m4, # lpt0), lpt0, orphans; ; boolvar0)⟩ (boolvar ↔ boolvar0)
Used simplifier rules: ⊦ is-encoded(lpt0, buf) ∧ # lpt0 = # lpt1 → (is-encoded(lpt1, buf) ↔ lpt0 = lpt1); (s)%eqs: ⊦ m = n + n0 ∧ m = n + n1 → n0 = n1; (forward) from specification nat-basic%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic