| remove-refsize0(istore0) = istore0, remove-refsize0(gstore0) = gstore0, elems nx ∩ ginval = ∅, dom gstore0 ∪ elems nx = dom gstore ∪ ginval, inv(istore0), inv(istore), inv(gstore0), inv(gstore \ ginval), istore0 ⊑ istore, pstate = unbuffered → syn, pstate.index? → pstate.lnum ∈ istore, pstate.journal? → nx ≠ [] ∧ pstate.lnum = nx.last ∧ pstate.lnum ∈ gstore, pstate.index? ∨ pstate = readonly ⊦ ⟪apersistence_add_ind#(ind, adr, istore0, ginval, gstore, gstore0, nx, maxino, ginval0; adr0, istore, pstate, syn; err)⟫ ( inv(istore) ∧ istore0 ⊑ istore ∧ (pstate.journal? → nx ≠ [] ∧ pstate.lnum = nx.last ∧ pstate.lnum ∈ gstore) ∧ (pstate.index? → pstate.lnum ∈ istore) ∧ (pstate = unbuffered → syn)), pstate.index?, dups(nx) |
pstate = readonly, remove-refsize0(istore0) = istore0, remove-refsize0(gstore0) = gstore0, elems nx ∩ ginval = ∅, dom gstore0 ∪ elems nx = dom gstore ∪ ginval, inv(istore0), inv(istore), inv(gstore0), inv(gstore \ ginval), istore0 ⊑ istore, ¬ dups(nx) ⊦ ⟪apersistence_add_ind#(ind, adr, istore0, ginval, gstore, gstore0, nx, maxino, ginval0; adr0, istore, pstate, syn; err)⟫ ( inv(istore) ∧ istore0 ⊑ istore ∧ (pstate.journal? → nx ≠ [] ∧ pstate.lnum = nx.last ∧ pstate.lnum ∈ gstore) ∧ (pstate.index? → pstate.lnum ∈ istore) ∧ (pstate = unbuffered → syn))
Used simplifier rules: ⊦ ¬ readonly.journal?; (s)% ⊦ unbuffered ≠ readonly; (s)% ⊦ ¬ readonly.index?; (s)