| v0 ∈ vols ↔ v0 ∈ avols, apebs[vols[v0][m].pnum] = mkpeb(aehdr, avhdr, buf, m0, boolvar), v0 ∈ vols → # vols[v0] = # avols[v0] ∧ (∀ m. m < # vols[v0] → (vols[v0][m] = unmapped → ¬ avols[v0][m].mapped?) ∧ ( vols[v0][m] ≠ unmapped → avols[v0][m].mapped? ∧ avols[v0][m].data = apebs[vols[v0][m].pnum].data ∧ apebs[vols[v0][m].pnum].fill ≤ avols[v0][m].fill) ∧ (avols[v0][m] = erased → ¬ v0 × m ∈ q)), ∀ v. (v ∈ vols ↔ v ∈ avols) ∧ ( v ∈ vols → # vols[v] = # avols[v] ∧ (∀ m. m < # vols[v] → (vols[v][m] = unmapped → ¬ avols[v][m].mapped?) ∧ ( vols[v][m] ≠ unmapped → avols[v][m].mapped? ∧ avols[v][m].data = apebs[vols[v][m].pnum].data ∧ apebs[vols[v][m].pnum].fill ≤ avols[v][m].fill) ∧ (avols[v][m] = erased → ¬ v × m ∈ q))) ⊦ (v0 ∈ vols ↔ v0 ∈ avols) ∧ ( v0 ∈ vols → # vols[v0] = # avols[v0] ∧ ( v0 ≠ v → m < # vols[v0] → (vols[v0][m] = unmapped → ¬ avols[v0][m].mapped?) ∧ (vols[v0][m] ≠ unmapped → avols[v0][m].mapped? ∧ avols[v0][m].data = buf ∧ m0 ≤ avols[v0][m].fill) ∧ (avols[v0][m] = erased → ¬ v0 × m ∈ q))) |
# vols[v0] = # avols[v0], apebs[vols[v0][m].pnum] = mkpeb(aehdr, avhdr, buf, m0, boolvar), m < # avols[v0], v0 ∈ avols, v0 ∈ vols, ∀ m. m < # avols[v0] → (vols[v0][m] = unmapped → ¬ avols[v0][m].mapped?) ∧ ( vols[v0][m] ≠ unmapped → avols[v0][m].mapped? ∧ avols[v0][m].data = apebs[vols[v0][m].pnum].data ∧ apebs[vols[v0][m].pnum].fill ≤ avols[v0][m].fill) ∧ (avols[v0][m] = erased → ¬ v0 × m ∈ q), ∀ v. (v ∈ vols ↔ v ∈ avols) ∧ ( v ∈ vols → # vols[v] = # avols[v] ∧ (∀ m. m < # vols[v] → (vols[v][m] = unmapped → ¬ avols[v][m].mapped?) ∧ ( vols[v][m] ≠ unmapped → avols[v][m].mapped? ∧ avols[v][m].data = apebs[vols[v][m].pnum].data ∧ apebs[vols[v][m].pnum].fill ≤ avols[v][m].fill) ∧ (avols[v][m] = erased → ¬ v × m ∈ q))) ⊦ v0 = v, (vols[v0][m] = unmapped → ¬ avols[v0][m].mapped?) ∧ (vols[v0][m] ≠ unmapped → avols[v0][m].mapped? ∧ avols[v0][m].data = buf ∧ m0 ≤ avols[v0][m].fill) ∧ (avols[v0][m] = erased → ¬ v0 × m ∈ q)
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%lf-01: ⊦ m < n ∧ n = n0 → m < n0; (forward) from specification nat-basic%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic