| v0 ∈ vols ↔ v0 ∈ avols, apebs[vols[v0][m0].pnum] = mkpeb(aehdr, avhdr, buf, m1, boolvar), v0 ∈ vols → # vols[v0] = # avols[v0] ∧ (∀ m0. m0 < # vols[v0] → (vols[v0][m0] = unmapped → ¬ avols[v0][m0].mapped?) ∧ ( vols[v0][m0] ≠ unmapped → avols[v0][m0].mapped? ∧ avols[v0][m0].data = apebs[vols[v0][m0].pnum].data ∧ apebs[vols[v0][m0].pnum].fill ≤ avols[v0][m0].fill) ∧ (avols[v0][m0] = erased → ¬ v0 × m0 ∈ q + eq-entry(n, v × m) ')), ∀ v0. (v0 ∈ vols ↔ v0 ∈ avols) ∧ ( v0 ∈ vols → # vols[v0] = # avols[v0] ∧ (∀ m0. m0 < # vols[v0] → (vols[v0][m0] = unmapped → ¬ avols[v0][m0].mapped?) ∧ ( vols[v0][m0] ≠ unmapped → avols[v0][m0].mapped? ∧ avols[v0][m0].data = apebs[vols[v0][m0].pnum].data ∧ apebs[vols[v0][m0].pnum].fill ≤ avols[v0][m0].fill) ∧ (avols[v0][m0] = erased → ¬ v0 × m0 ∈ q + eq-entry(n, v × m) '))) ⊦ v ∈ vols, (v0 ∈ vols ↔ v0 ∈ avols) ∧ ( v0 ∈ vols → # vols[v0] = # avols[v0] ∧ ( m0 < # vols[v0] → (vols[v0][m0] = unmapped → ¬ avols[v0][m0].mapped?) ∧ (vols[v0][m0] ≠ unmapped → avols[v0][m0].mapped? ∧ avols[v0][m0].data = buf ∧ m1 ≤ avols[v0][m0].fill) ∧ (avols[v0][m0] = erased → ¬ v0 × m0 ∈ q))) |
# vols[v0] = # avols[v0], apebs[vols[v0][m0].pnum] = mkpeb(aehdr, avhdr, buf, m1, boolvar), m0 < # avols[v0], v0 ∈ avols, v0 ∈ vols, ∀ m0. m0 < # avols[v0] → (vols[v0][m0] = unmapped → ¬ avols[v0][m0].mapped?) ∧ ( vols[v0][m0] ≠ unmapped → avols[v0][m0].mapped? ∧ avols[v0][m0].data = apebs[vols[v0][m0].pnum].data ∧ apebs[vols[v0][m0].pnum].fill ≤ avols[v0][m0].fill) ∧ (avols[v0][m0] = erased → ¬ v0 × m0 ∈ q + eq-entry(n, v × m) '), ∀ v0. (v0 ∈ vols ↔ v0 ∈ avols) ∧ ( v0 ∈ vols → # vols[v0] = # avols[v0] ∧ (∀ m0. m0 < # vols[v0] → (vols[v0][m0] = unmapped → ¬ avols[v0][m0].mapped?) ∧ ( vols[v0][m0] ≠ unmapped → avols[v0][m0].mapped? ∧ avols[v0][m0].data = apebs[vols[v0][m0].pnum].data ∧ apebs[vols[v0][m0].pnum].fill ≤ avols[v0][m0].fill) ∧ (avols[v0][m0] = erased → ¬ v0 × m0 ∈ q + eq-entry(n, v × m) '))) ⊦ v ∈ vols, (vols[v0][m0] = unmapped → ¬ avols[v0][m0].mapped?) ∧ (vols[v0][m0] ≠ unmapped → avols[v0][m0].mapped? ∧ avols[v0][m0].data = buf ∧ m1 ≤ avols[v0][m0].fill) ∧ (avols[v0][m0] = erased → ¬ v0 × m0 ∈ q)
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%lf-01: ⊦ m < n ∧ n = n0 → m < n0; (forward) from specification nat-basic%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic