| v0 ∈ vols ↔ v0 ∈ avols, apebs[vols[v, fill(mkebatbl(n), unmapped)][v0][m].pnum] = mkpeb(aehdr, avhdr, buf, m0, boolvar), v0 ∈ avols → # vols[v0] = # avols[v0] ∧ (∀ m. m < # vols[v0] → (vols[v0][m] = unmapped → ¬ avols[v0][m].mapped?) ∧ ( vols[v0][m] ≠ unmapped → avols[v0][m].mapped? ∧ avols[v0][m].data = apebs[vols[v0][m].pnum].data ∧ apebs[vols[v0][m].pnum].fill ≤ avols[v0][m].fill) ∧ (avols[v0][m] = erased → ¬ v0 × m ∈ q)) ⊦ v0 = v, v ∈ vols, (v0 ∈ vols[v, fill(mkebatbl(n), unmapped)] ↔ v0 ∈ avols[v, fill(mkabstractvolume(n), erased)]) ∧ ( v0 ∈ vols[v, fill(mkebatbl(n), unmapped)] → # vols[v, fill(mkebatbl(n), unmapped)][v0] = # avols[v, fill(mkabstractvolume(n), erased)][v0] ∧ ( m < # vols[v, fill(mkebatbl(n), unmapped)][v0] → (vols[v, fill(mkebatbl(n), unmapped)][v0][m] = unmapped → ¬ avols[v, fill(mkabstractvolume(n), erased)][v0][m].mapped?) ∧ ( vols[v, fill(mkebatbl(n), unmapped)][v0][m] ≠ unmapped → avols[v, fill(mkabstractvolume(n), erased)][v0][m].mapped? ∧ avols[v, fill(mkabstractvolume(n), erased)][v0][m].data = buf ∧ m0 ≤ avols[v, fill(mkabstractvolume(n), erased)][v0][m].fill) ∧ (avols[v, fill(mkabstractvolume(n), erased)][v0][m] = erased → ¬ v0 × m ∈ q - v))) |
# vols[v0] = # avols[v0], apebs[vols[v0][m].pnum] = mkpeb(aehdr, avhdr, buf, m0, boolvar), m < # avols[v0], v0 ∈ avols, v0 ∈ vols, ∀ m. m < # avols[v0] → (vols[v0][m] = unmapped → ¬ avols[v0][m].mapped?) ∧ ( vols[v0][m] ≠ unmapped → avols[v0][m].mapped? ∧ avols[v0][m].data = apebs[vols[v0][m].pnum].data ∧ apebs[vols[v0][m].pnum].fill ≤ avols[v0][m].fill) ∧ (avols[v0][m] = erased → ¬ v0 × m ∈ q) ⊦ v ∈ vols, (vols[v0][m] = unmapped → ¬ avols[v0][m].mapped?) ∧ (vols[v0][m] ≠ unmapped → avols[v0][m].mapped? ∧ avols[v0][m].data = buf ∧ m0 ≤ avols[v0][m].fill) ∧ (avols[v0][m] = erased → ¬ v0 × m ∈ q - v)
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%lf-01: ⊦ m < n ∧ n = n0 → m < n0; (forward) from specification nat-basic%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic% ⊦ v ≠ v0 → avols[v0, evol][v] = avols[v]; (s)% ⊦ v ∈ vols ∧ ¬ v0 ∈ vols → vols[v0, ebatbl][v] = vols[v]; (s)% ⊦ v ≠ v0 → (v ∈ avols[v0, evol] ↔ v ∈ avols); (s)% ⊦ v ≠ v0 → (v ∈ vols[v0, ebatbl] ↔ v ∈ vols); (s)% ⊦ v ≠ v0 → vols[v0, ebatbl][v] = vols[v]; (s)