| # gndx0 = # lax0, abs-node(buf1, gnd), abs-nodes(buf0, m + # buf1, gndx0, lax0, weak), inv-flashsize(gndx0, lax0), ∀ buf2, m, gndx, lax, weak. # buf2 < #(buf1 + buf0) → abs-nodes(buf2, m, gndx, lax, weak) → inv-flashsize(gndx, lax) ⊦ 2 * NODE_HEADER_SIZE + gnd.alignedsize = # buf1 ∧ inv-flashsize(gndx0, lax0) |
# gndx0 = # lax0, abs-node(buf1, gnd), abs-nodes(buf0, m + # buf1, gndx0, lax0, weak), inv-flashsize(gndx0, lax0), ∀ buf2, m, gndx, lax, weak. # buf2 < #(buf1 + buf0) → abs-nodes(buf2, m, gndx, lax, weak) → inv-flashsize(gndx, lax) ⊦ 2 * NODE_HEADER_SIZE + gnd.alignedsize = # buf1