| # apebs = # wlar, wlar[vtblpnum0].ec = below(free-ecs(wlar), free-ecs(wlar).min + 2 * WL_THRESHOLD).max, wlar[vtblpnum0].status = free, boolvar0 ↔ false, wlar[m] = wl-entry(m0, free), bflipset0 = bflipset, m < # wlar, m0 < free-ecs(wlar).min + 2 * WL_THRESHOLD, vtblpnum0 < # wlar, bflipset-cons(bflipset, wlar), unique-sqns(apebs), valid-ebatbl(apebs, wlar, vols, vtblpnum1), valid-eraseq(apebs, q), valid-eraseq(wlar, q), valid-eraseq(q), valid-global-sqn(apebs, sqnum), valid-vtbl(apebs, vols, wlar, vtblpnum1), valid-wl(apebs, wlar) ⊦ # free-ecs(wlar) = 0, bflipset = ∅, free-ecs(wlar) = ∅, vtblpnum1 = m, VTBL_VOLID ∈ vols, vtblpnum1 ∈ q, ∃ n. n ∈ bflipset |
# apebs = # wlar, wlar[vtblpnum0].ec = below(free-ecs(wlar), free-ecs(wlar).min + 2 * WL_THRESHOLD).max, wlar[vtblpnum0].status = free, wlar[m] = wl-entry(m0, free), m < # wlar, m0 < free-ecs(wlar).min + 2 * WL_THRESHOLD, vtblpnum0 < # wlar, bflipset-cons(bflipset, wlar), unique-sqns(apebs), valid-ebatbl(apebs, wlar, vols, vtblpnum1), valid-eraseq(apebs, q), valid-eraseq(wlar, q), valid-eraseq(q), valid-global-sqn(apebs, sqnum), valid-vtbl(apebs, vols, wlar, vtblpnum1), valid-wl(apebs, wlar) ⊦ # bflipset = 0, # free-ecs(wlar) = 0, bflipset = ∅, free-ecs(wlar) = ∅, vtblpnum1 = m, VTBL_VOLID ∈ vols, vtblpnum1 ∈ q, ∃ n. n ∈ bflipset
Used simplifier rules: size-zero: ⊦ # ns ≠ 0 → ns ≠ ∅; (forward) from specification set-basic[nat-set]%size-zero-01: ⊦ ns ≠ ∅ → # ns ≠ 0; (forward) from specification set-basic[nat-set]