| # apebs = # wlar, ¬ boolvar ↔ used-ecs(wlar) = ∅, boolvar0 ↔ false, wlar[m] = wl-entry(m0, free), wlar[vtblpnum0] = wl-entry(below(free-ecs(wlar), free-ecs(wlar).min + 2 * WL_THRESHOLD).max, free), vtblpnum0 < # wlar, m0 < free-ecs(wlar).min + 2 * WL_THRESHOLD, m < # wlar, unique-sqns(apebs), valid-ebatbl(apebs, wlar, vols, vtblpnum1), valid-eraseq(q), valid-eraseq(wlar, q), valid-eraseq(apebs, q), valid-global-sqn(apebs, sqnum), valid-vtbl(apebs, vols, wlar, vtblpnum1), valid-wl(apebs, wlar), boolvar → vtblpnum < # wlar ∧ wlar[vtblpnum].status = used ∧ wlar[vtblpnum].ec = used-ecs(wlar).min ⊦ ⟪m1 := below(free-ecs(wlar), free-ecs(wlar).min + 2 * WL_THRESHOLD).max; if boolvar ∧ wlar[vtblpnum].ec + WL_THRESHOLD ≤ m1 then boolvar0 := true⟫ (boolvar0 → vtblpnum < # wlar ∧ wlar[vtblpnum].status = used ∧ wlar[vtblpnum].ec + WL_THRESHOLD ≤ m1), # free-ecs(wlar) = 0, free-ecs(wlar) = ∅, vtblpnum1 = m, vtblpnum1 = vtblpnum0, vtblpnum1 ∈ q, VTBL_VOLID ∈ vols |
# apebs = # wlar, boolvar0 ↔ false, ¬ boolvar ↔ used-ecs(wlar) = ∅, wlar[vtblpnum0] = wl-entry(below(free-ecs(wlar), free-ecs(wlar).min + 2 * WL_THRESHOLD).max, free), wlar[m] = wl-entry(m0, free), m1 = below(free-ecs(wlar), free-ecs(wlar).min + 2 * WL_THRESHOLD).max, m < # wlar, m0 < free-ecs(wlar).min + 2 * WL_THRESHOLD, vtblpnum0 < # wlar, unique-sqns(apebs), valid-ebatbl(apebs, wlar, vols, vtblpnum1), valid-eraseq(apebs, q), valid-eraseq(wlar, q), valid-eraseq(q), valid-global-sqn(apebs, sqnum), valid-vtbl(apebs, vols, wlar, vtblpnum1), valid-wl(apebs, wlar), boolvar → vtblpnum < # wlar ∧ wlar[vtblpnum].status = used ∧ wlar[vtblpnum].ec = used-ecs(wlar).min ⊦ ⟪if boolvar ∧ wlar[vtblpnum].ec + WL_THRESHOLD ≤ m1 then boolvar0 := true⟫ (boolvar0 → vtblpnum < # wlar ∧ wlar[vtblpnum].status = used ∧ wlar[vtblpnum].ec + WL_THRESHOLD ≤ m1), # free-ecs(wlar) = 0, below(free-ecs(wlar), free-ecs(wlar).min + 2 * WL_THRESHOLD) = ∅, free-ecs(wlar) = ∅, vtblpnum1 = vtblpnum0, vtblpnum1 = m, VTBL_VOLID ∈ vols, vtblpnum1 ∈ q
# apebs = # wlar, boolvar0 ↔ false, ¬ boolvar ↔ used-ecs(wlar) = ∅, wlar[vtblpnum0] = wl-entry(below(free-ecs(wlar), free-ecs(wlar).min + 2 * WL_THRESHOLD).max, free), wlar[m] = wl-entry(m0, free), m < # wlar, m0 < free-ecs(wlar).min + 2 * WL_THRESHOLD, vtblpnum0 < # wlar, unique-sqns(apebs), valid-ebatbl(apebs, wlar, vols, vtblpnum1), valid-eraseq(apebs, q), valid-eraseq(wlar, q), valid-eraseq(q), valid-global-sqn(apebs, sqnum), valid-vtbl(apebs, vols, wlar, vtblpnum1), valid-wl(apebs, wlar), boolvar → vtblpnum < # wlar ∧ wlar[vtblpnum].status = used ∧ wlar[vtblpnum].ec = used-ecs(wlar).min ⊦ # free-ecs(wlar) = 0, free-ecs(wlar) = ∅, vtblpnum1 = vtblpnum0, vtblpnum1 = m, VTBL_VOLID ∈ vols, vtblpnum1 ∈ q, below(free-ecs(wlar), free-ecs(wlar).min + 2 * WL_THRESHOLD) ≠ ∅ ∧ free-ecs(wlar) ≠ ∅