| # apebs = # wlar, n0 = free-ecs(wlar).min + 2 * WL_THRESHOLD, wlar0 = wlar, bflipset-cons(bflipset, wlar), unique-sqns(apebs), valid-ebatbl(apebs, wlar, vols, vtblpnum1), valid-eraseq(q), valid-eraseq(wlar, q), valid-eraseq(apebs, q), valid-global-sqn(apebs, sqnum), valid-vtbl(apebs, vols, wlar, vtblpnum1), valid-wl(apebs, wlar), ∃ m. m < # wlar ∧ wlar[m].ec < free-ecs(wlar).min + 2 * WL_THRESHOLD ∧ wlar[m].status = free ⊦ [ubi_wl_find_free_max_below#(free-ecs(wlar).min + 2 * WL_THRESHOLD, wlar; vtblpnum0)] ( vtblpnum0 < # wlar0 ∧ wlar0[vtblpnum0].status = free ∧ wlar0[vtblpnum0].ec = below(free-ecs(wlar0), n0).max → ⟪bflipset0 := bflipset; boolvar0 := false; if bflipset ≠ ∅ then choose n with n ∈ bflipset in {vtblpnum := n; bflipset := bflipset -- n; boolvar0 := true} else {ubi_wl_get_used_min#(wlar; vtblpnum; boolvar); if boolvar ∧ wlar[vtblpnum].ec + WL_THRESHOLD ≤ wlar[vtblpnum0].ec then boolvar0 := true}⟫ ( bflipset-cons(bflipset, wlar) ∧ ( boolvar0 → vtblpnum0 < # wlar ∧ wlar[vtblpnum0].status = free ∧ vtblpnum < # wlar ∧ wlar[vtblpnum].status = used ∧ (bflipset0 = ∅ → wlar[vtblpnum].ec + WL_THRESHOLD ≤ wlar[vtblpnum0].ec)))), # free-ecs(wlar) = 0, free-ecs(wlar) = ∅, VTBL_VOLID ∈ vols, vtblpnum1 ∈ q |
# apebs = # wlar, wlar[m].status = free, # free-ecs(wlar) ≠ 0, free-ecs(wlar) ≠ ∅, wlar[m].ec < free-ecs(wlar).min + 2 * WL_THRESHOLD, m < # wlar, bflipset-cons(bflipset, wlar), unique-sqns(apebs), valid-ebatbl(apebs, wlar, vols, vtblpnum1), valid-eraseq(q), valid-eraseq(wlar, q), valid-eraseq(apebs, q), valid-global-sqn(apebs, sqnum), valid-vtbl(apebs, vols, wlar, vtblpnum1), valid-wl(apebs, wlar), ¬ VTBL_VOLID ∈ vols, ¬ vtblpnum1 ∈ q ⊦ [ubi_wl_find_free_max_below#(free-ecs(wlar).min + 2 * WL_THRESHOLD, wlar; vtblpnum0)] ( vtblpnum0 < # wlar ∧ wlar[vtblpnum0].status = free ∧ wlar[vtblpnum0].ec = below(free-ecs(wlar), free-ecs(wlar).min + 2 * WL_THRESHOLD).max → ⟪bflipset0 := bflipset; boolvar0 := false; if bflipset ≠ ∅ then choose n with n ∈ bflipset in {vtblpnum := n; bflipset := bflipset -- n; boolvar0 := true} else {ubi_wl_get_used_min#(wlar; vtblpnum; boolvar); if boolvar ∧ wlar[vtblpnum].ec + WL_THRESHOLD ≤ wlar[vtblpnum0].ec then boolvar0 := true}⟫ ( bflipset-cons(bflipset, wlar) ∧ ( boolvar0 → vtblpnum < # wlar ∧ wlar[vtblpnum].status = used ∧ (bflipset0 = ∅ → wlar[vtblpnum].ec + WL_THRESHOLD ≤ wlar[vtblpnum0].ec))))
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%lf-01: ⊦ m < n ∧ n = n0 → m < n0; (forward) from specification nat-basic%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic