| remove-refsize0(istore1) = istore1, remove-refsize0(gstore1) = gstore1, syn, elems nx ∩ ginval1 = ∅, dom gstore1 ∪ elems nx = dom gstore2 ∪ ginval1, pstate ≠ readonly, inv(istore1), inv(istore2), inv(gstore1), inv(gstore2 \ ginval1), istore1 ⊑ istore2, ¬ dups(nx), pstate.index? → pstate.lnum ∈ istore2, pstate.journal? → nx ≠ [] ∧ pstate.lnum = nx.last ∧ pstate.lnum ∈ gstore2 ⊦ ⟨if pstate = unbuffered then err := ESUCCESS else {fail_or_success#(; ; err); syn := err = ESUCCESS; skip or pstate := readonly}⟩ syn |
pstate = unbuffered, remove-refsize0(gstore1) = gstore1, remove-refsize0(istore1) = istore1, syn, elems nx ∩ ginval1 = ∅, dom gstore1 ∪ elems nx = dom gstore2 ∪ ginval1, inv(gstore2 \ ginval1), inv(gstore1), inv(istore2), inv(istore1), istore1 ⊑ istore2, pstate.journal? → nx ≠ [] ∧ pstate.lnum = nx.last ∧ pstate.lnum ∈ gstore2, pstate.index? → pstate.lnum ∈ istore2 ⊦ ⟨err := ESUCCESS⟩ syn, pstate = readonly, dups(nx)
remove-refsize0(gstore1) = gstore1, remove-refsize0(istore1) = istore1, syn, elems nx ∩ ginval1 = ∅, dom gstore1 ∪ elems nx = dom gstore2 ∪ ginval1, inv(gstore2 \ ginval1), inv(gstore1), inv(istore2), inv(istore1), istore1 ⊑ istore2, pstate.journal? → nx ≠ [] ∧ pstate.lnum = nx.last ∧ pstate.lnum ∈ gstore2, pstate.index? → pstate.lnum ∈ istore2 ⊦ ⟨fail_or_success#(; ; err); syn := err = ESUCCESS; skip or pstate := readonly⟩ syn, pstate = unbuffered, pstate = readonly, dups(nx)