| # buf = PEB_SIZE, m0 + 1 = # pebs, pebs[m0] = mkpeb(buf, EB_PAGE_SIZE, false), n1 < LEB_SIZE, abs(subarray(pebs, 0, m0), apebs), is-encoded(echdr(n), subarray(buf, 0, EB_PAGE_SIZE)), ubi-io-initial(pebs), ubi-io-initial(apebs), EB_PAGE_SIZE ≤ PEB_SIZE, ∀ n2. n2 < LEB_SIZE + EB_PAGE_SIZE → buf[EB_PAGE_SIZE + n2] = empty ⊦ buf[2 * EB_PAGE_SIZE + n1] = empty |
# buf = PEB_SIZE, m0 + 1 = # pebs, pebs[m0] = mkpeb(buf, EB_PAGE_SIZE, false), n1 < LEB_SIZE, abs(subarray(pebs, 0, m0), apebs), is-encoded(echdr(n), subarray(buf, 0, EB_PAGE_SIZE)), ubi-io-initial(pebs), ubi-io-initial(apebs), EB_PAGE_SIZE ≤ PEB_SIZE, ∀ n2. n2 < LEB_SIZE + EB_PAGE_SIZE → buf[EB_PAGE_SIZE + n2] = empty ⊦ buf[2 * EB_PAGE_SIZE + n1] = empty
Used simplifier rules: ⊦ LEB_SIZE ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic