| # lpt0 = # avol0, # lpt = # avol0, lpt[n] = mklp(m4, m5, lpf0, m6), lpt[n0, mklp(0, 0, LP_GROUP_NODES, m2)][n] = mklp(m, m0, lpf, m1), lpt[n0] = mklp(0, m3, LP_FREE, m2), keyset(gch) = gc-heap(lpt, log1), n0 < # avol0, awbuf-inv(avol0[n0, mapped(mkbuf(0))], buffered(n0)), awbuf-inv(avol0, bleb), awbuf-inv(avol0[n0, mapped(mkbuf(0))], bleb), bin-heap-inv(gch, lpt), bufs-log-only(bleb, log1, lpt), freelist-cons(lpt, n0 ' + nx0), lpt-free-unref(lpt0), lpt-free-unref(lpt), lpt-leb-size(lpt0), lpt-leb-size(lpt), lpt-ram-flash(lpt, lpt0, log1), synced(avol0), synced(avol0[n0, mapped(mkbuf(0))]), bleb.isbuf? → bleb.leb < # avol0 ∧ lpt[bleb.leb].size = # avol0[bleb.leb].data, n ∈ log1 → n < # avol0 ∧ lpf0 = LP_GROUP_NODES, n ∈ log1 ∨ n = n0 ⊦ buffered(n0) = bleb, dups(log1), n0 ∈ log1, n < # avol0 ∧ lpf = LP_GROUP_NODES |
Used simplifier rules: ⊦ m ≠ n → lpt[n, lp][m] = lpt[m]; (s)%lf-01: ⊦ m < n ∧ n = n0 → m < n0; (forward) from specification nat-basic%⊦ mklp(m, m0, lpf, m1) = mklp(m2, m3, lpf0, m4) ↔ m = m2 ∧ m0 = m3 ∧ lpf = lpf0 ∧ m1 = m4; (ws)% ⊦ m < n ↔ ¬ n ≤ m; (ss)% ⊦ m < n → (n ≤ m ↔ false); (s)%m < # lpt ⊦ lpt[m, lp][m] = lp; (s) Used formulas: n = n0