| # lpt1 = # avol0, # lpt0 = # avol0, EB_PAGE_SIZE = # buf1 + # buf0 % EB_PAGE_SIZE, avol0[n] = mapped(buf0), lpt1[n] = mklp(m3, # buf0, lpf, m4), keyset(gch) = gc-heap(lpt1, log0), n < # avol0, abs-padding(buf1), awbuf-inv(avol0[n, mapped(buf0 + buf1)], buffered(n)), awbuf-inv(avol0, buffered(n)), bin-heap-inv(gch, lpt1), buf-ro-rw-mode(false, buffered(n), lpt1, avol0), bufs-log-only(buffered(n), log0, lpt1), freelist-cons(lpt1, freelist), is-aligned(# buf0, 2 * NODE_HEADER_SIZE), log-group-block(log0, lpt1), lpt-free-unref(lpt0), lpt-free-unref(lpt1), lpt-leb-size(lpt0), lpt-leb-size(lpt1), lpt-ram-flash(lpt1, lpt0, log0), # buf0 ≤ LEB_SIZE, # buf0 + # buf1 ≤ LEB_SIZE ⊦ buf1 = mkbuf(0), lpf = LP_FREE, is-aligned(# buf0, EB_PAGE_SIZE), EB_PAGE_SIZE + # buf0 ≤ LEB_SIZE + # buf0 % EB_PAGE_SIZE |
# lpt1 = # avol0, # lpt0 = # avol0, EB_PAGE_SIZE = # buf1 + # buf0 % EB_PAGE_SIZE, avol0[n] = mapped(buf0), lpt1[n] = mklp(m3, # buf0, lpf, m4), keyset(gch) = gc-heap(lpt1, log0), LEB_SIZE + # buf0 % EB_PAGE_SIZE < EB_PAGE_SIZE + # buf0, n < # avol0, abs-padding(buf1), awbuf-inv(avol0[n, mapped(buf0 + buf1)], buffered(n)), awbuf-inv(avol0, buffered(n)), bin-heap-inv(gch, lpt1), buf-ro-rw-mode(false, buffered(n), lpt1, avol0), bufs-log-only(buffered(n), log0, lpt1), freelist-cons(lpt1, freelist), is-aligned(# buf0, 2 * NODE_HEADER_SIZE), log-group-block(log0, lpt1), lpt-free-unref(lpt0), lpt-free-unref(lpt1), lpt-leb-size(lpt0), lpt-leb-size(lpt1), lpt-ram-flash(lpt1, lpt0, log0), # buf0 ≤ LEB_SIZE, # buf0 + # buf1 ≤ LEB_SIZE ⊦ buf1 = mkbuf(0), lpf = LP_FREE, is-aligned(# buf0, EB_PAGE_SIZE)
Used simplifier rules: c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ EB_PAGE_SIZE + n = 0 ↔ false; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic% ⊦ m ≤ n ↔ ¬ n < m; (ss)