| # wlar = # apebs, recs0[v × m0] = recovery-entry(m2, m3), apebs[n] = mkpeb(aehdr, avhdr, buf, m, boolvar), apebs[n0] = mkpeb(aehdr0, avhdr0, buf0, m1, boolvar0), wlar[n0] = wl-entry(m4, stat), bflipset-cons(bflipset, wlar), unique-sqns(apebs), unmapped-vols(vols), valid-eraseq(wlar, q), valid-eraseq-stronger(apebs, q), valid-recs(apebs, wlar, recs0), valid-vtbl(apebs, vols, wlar, n), valid-wl(apebs, wlar) ⊦ v × m0 ≠ VTBL_VOLID × VTBL_LNUM ∧ v × m0 ∈ recs0 ∧ m2 = n0 ↔ stat = used ∧ n0 < # apebs ∧ avhdr0.valid? ∧ avhdr0.vol = v ∧ avhdr0.leb = m0 ∧ n0 ≠ n, VTBL_VOLID ∈ vols, n ∈ q |
# wlar = # apebs, wlar[n0] = wl-entry(m4, stat), apebs[n0] = mkpeb(aehdr0, avhdr0, buf0, m1, boolvar0), apebs[n] = mkpeb(aehdr, avhdr, buf, m, boolvar), recs0[v × m0] = recovery-entry(m2, m3), m2 = n0, bflipset-cons(bflipset, wlar), unique-sqns(apebs), unmapped-vols(vols), valid-eraseq(wlar, q), valid-eraseq-stronger(apebs, q), valid-recs(apebs, wlar, recs0), valid-vtbl(apebs, vols, wlar, n), valid-wl(apebs, wlar), v × m0 ∈ recs0 ⊦ v × m0 = VTBL_VOLID × VTBL_LNUM, n ∈ q, VTBL_VOLID ∈ vols, stat = used ∧ n0 < # apebs ∧ avhdr0.valid? ∧ avhdr0.vol = v ∧ avhdr0.leb = m0 ∧ n0 ≠ n
# wlar = # apebs, avhdr0.leb = m0, avhdr0.vol = v, wlar[n0] = wl-entry(m4, stat), apebs[n0] = mkpeb(aehdr0, avhdr0, buf0, m1, boolvar0), apebs[n] = mkpeb(aehdr, avhdr, buf, m, boolvar), recs0[v × m0] = recovery-entry(m2, m3), stat = used, avhdr0.valid?, n0 < # apebs, bflipset-cons(bflipset, wlar), unique-sqns(apebs), unmapped-vols(vols), valid-eraseq(wlar, q), valid-eraseq-stronger(apebs, q), valid-recs(apebs, wlar, recs0), valid-vtbl(apebs, vols, wlar, n), valid-wl(apebs, wlar) ⊦ n0 = n, n ∈ q, VTBL_VOLID ∈ vols, v × m0 ≠ VTBL_VOLID × VTBL_LNUM ∧ v × m0 ∈ recs0 ∧ m2 = n0