| # evol = # ebatbl, v0 ∈ vols ↔ v0 ∈ avols, apebs[vols[v0][m].pnum] = mkpeb(aehdr, avhdr, buf, m0, boolvar), v0 ∈ vols → # vols[v0] = # avols[v0] ∧ (∀ m. m < # vols[v0] → (vols[v0][m] = unmapped → ¬ avols[v0][m].mapped?) ∧ ( vols[v0][m] ≠ unmapped → avols[v0][m].mapped? ∧ avols[v0][m].data = apebs[vols[v0][m].pnum].data ∧ apebs[vols[v0][m].pnum].fill ≤ avols[v0][m].fill) ∧ (avols[v0][m] = erased → ¬ v0 × m ∈ q)), ∀ v0. (v0 ∈ vols ↔ v0 ∈ avols) ∧ ( v0 ∈ vols → # vols[v0] = # avols[v0] ∧ (∀ m. m < # vols[v0] → (vols[v0][m] = unmapped → ¬ avols[v0][m].mapped?) ∧ ( vols[v0][m] ≠ unmapped → avols[v0][m].mapped? ∧ avols[v0][m].data = apebs[vols[v0][m].pnum].data ∧ apebs[vols[v0][m].pnum].fill ≤ avols[v0][m].fill) ∧ (avols[v0][m] = erased → ¬ v0 × m ∈ q))) ⊦ v0 = v, v ∈ vols, v ∈ avols, (v0 ∈ vols ↔ v0 ∈ avols) ∧ ( v0 ∈ vols → # vols[v0] = # avols[v0] ∧ ( m < # vols[v0] → (vols[v0][m] = unmapped → ¬ avols[v0][m].mapped?) ∧ (vols[v0][m] ≠ unmapped → avols[v0][m].mapped? ∧ avols[v0][m].data = buf ∧ m0 ≤ avols[v0][m].fill) ∧ (avols[v0][m] = erased → ¬ v0 × m ∈ q))) |
# vols[v0] = # avols[v0], # evol = # ebatbl, apebs[vols[v0][m].pnum] = mkpeb(aehdr, avhdr, buf, m0, boolvar), m < # avols[v0], v0 ∈ avols, v0 ∈ vols, ∀ m. m < # avols[v0] → (vols[v0][m] = unmapped → ¬ avols[v0][m].mapped?) ∧ ( vols[v0][m] ≠ unmapped → avols[v0][m].mapped? ∧ avols[v0][m].data = apebs[vols[v0][m].pnum].data ∧ apebs[vols[v0][m].pnum].fill ≤ avols[v0][m].fill) ∧ (avols[v0][m] = erased → ¬ v0 × m ∈ q), ∀ v0. (v0 ∈ vols ↔ v0 ∈ avols) ∧ ( v0 ∈ vols → # vols[v0] = # avols[v0] ∧ (∀ m. m < # vols[v0] → (vols[v0][m] = unmapped → ¬ avols[v0][m].mapped?) ∧ ( vols[v0][m] ≠ unmapped → avols[v0][m].mapped? ∧ avols[v0][m].data = apebs[vols[v0][m].pnum].data ∧ apebs[vols[v0][m].pnum].fill ≤ avols[v0][m].fill) ∧ (avols[v0][m] = erased → ¬ v0 × m ∈ q))) ⊦ v ∈ vols, v ∈ avols, (vols[v0][m] = unmapped → ¬ avols[v0][m].mapped?) ∧ (vols[v0][m] ≠ unmapped → avols[v0][m].mapped? ∧ avols[v0][m].data = buf ∧ m0 ≤ avols[v0][m].fill) ∧ (avols[v0][m] = erased → ¬ v0 × m ∈ q)
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%lf-01: ⊦ m < n ∧ n = n0 → m < n0; (forward) from specification nat-basic%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic