| # lpt1 = # avol0, # lpt0 = # avol0, (# buf0 + # buf1) + n0 = LEB_SIZE, EB_PAGE_SIZE = # buf1 + # buf0 % EB_PAGE_SIZE, avol0[n] = mapped(buf0), lpt1[n] = mklp(m3, # buf0, lpf, m4), keyset(gch) = gc-heap(lpt1, log0), LEB_SIZE + # buf0 % EB_PAGE_SIZE < EB_PAGE_SIZE + # buf0, n < # avol0, abs-padding(buf1), awbuf-inv(avol0[n, mapped(buf0 + buf1)], buffered(n)), awbuf-inv(avol0, buffered(n)), bin-heap-inv(gch, lpt1), buf-ro-rw-mode(false, buffered(n), lpt1, avol0), bufs-log-only(buffered(n), log0, lpt1), freelist-cons(lpt1, freelist), is-aligned(# buf0, 2 * NODE_HEADER_SIZE), log-group-block(log0, lpt1), lpt-free-unref(lpt0), lpt-free-unref(lpt1), lpt-leb-size(lpt0), lpt-leb-size(lpt1), lpt-ram-flash(lpt1, lpt0, log0), # buf0 ≤ LEB_SIZE ⊦ buf1 = mkbuf(0), lpf = LP_FREE, is-aligned(# buf0, EB_PAGE_SIZE) |
Used simplifier rules: ⊦ m ≤ m + n; (s)%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic%c: ⊦ m + n = n + m; from specification nat-basic% ⊦ EB_PAGE_SIZE = n0 + n1 → n0 + n1 + n2 = EB_PAGE_SIZE + n2; (s)% ⊦ m + n < m + n0 ↔ n < n0; (s)% ⊦ ¬ m + n < m; (s)