| # apebs = # wlar, vols[v][vtblpnum0] = ⌜m⌝ , wlar[m] = wl-entry(m0, used), lref = v × vtblpnum0, vtblpnum = m, m < # wlar, vtblpnum0 < # vols[v], bflipset-cons(bflipset, wlar), unique-sqns(apebs), valid-ebatbl(apebs, wlar, vols, vtblpnum1), valid-eraseq(q), valid-eraseq(wlar, q), valid-eraseq(apebs, q), valid-global-sqn(apebs, sqnum), valid-peb(v, vtblpnum0, apebs[m]), valid-vtbl(apebs, vols, wlar, vtblpnum1), valid-wl(apebs, wlar), v ∈ vols ⊦ ⟪wlar[vtblpnum].status := erasing; q := q + eq-entry(vtblpnum, lref)⟫ ( # apebs = # wlar ∧ valid-wl(apebs, wlar) ∧ valid-eraseq(q) ∧ valid-eraseq(wlar, q) ∧ valid-eraseq(apebs, q) ∧ bflipset-cons(bflipset -- m, wlar) ∧ valid-ebatbl(apebs, wlar, vols[v, vols[v][vtblpnum0, unmapped]], vtblpnum1) ∧ valid-vtbl(apebs, vols, wlar, vtblpnum1)), m = vtblpnum1, VTBL_VOLID ∈ vols, vtblpnum1 ∈ q, m ∈ q |
# apebs = # wlar, wlar[m] = wl-entry(m0, used), vols[v][vtblpnum0] = ⌜m⌝ , lref = v × vtblpnum0, vtblpnum = m, vtblpnum < # wlar, vtblpnum0 < # vols[v], m < # wlar, bflipset-cons(bflipset, wlar), unique-sqns(apebs), valid-ebatbl(apebs, wlar, vols, vtblpnum1), valid-eraseq(apebs, q), valid-eraseq(wlar, q), valid-eraseq(q), valid-global-sqn(apebs, sqnum), valid-peb(v, vtblpnum0, apebs[m]), valid-vtbl(apebs, vols, wlar, vtblpnum1), valid-wl(apebs, wlar), v ∈ vols ⊦ ⟪q := q + eq-entry(vtblpnum, lref)⟫ ( # apebs = # wlar[vtblpnum, wlar[vtblpnum].status:= erasing] ∧ valid-wl(apebs, wlar[vtblpnum, wlar[vtblpnum].status:= erasing]) ∧ valid-eraseq(q) ∧ valid-eraseq(wlar[vtblpnum, wlar[vtblpnum].status:= erasing], q) ∧ valid-eraseq(apebs, q) ∧ bflipset-cons(bflipset -- m, wlar[vtblpnum, wlar[vtblpnum].status:= erasing]) ∧ valid-ebatbl(apebs, wlar[vtblpnum, wlar[vtblpnum].status:= erasing], vols[v, vols[v][vtblpnum0, unmapped]], vtblpnum1) ∧ valid-vtbl(apebs, vols, wlar[vtblpnum, wlar[vtblpnum].status:= erasing], vtblpnum1)), m = vtblpnum1, m ∈ q, vtblpnum1 ∈ q, VTBL_VOLID ∈ vols