| # wlar = # apebs, avhdr0.leb = VTBL_LNUM, avhdr.leb = VTBL_LNUM, avhdr.vol = VTBL_VOLID, avhdr0.vol = VTBL_VOLID, recs0[VTBL_VOLID × VTBL_LNUM] = recovery-entry(n0, m3), apebs[n] = mkpeb(aehdr, avhdr, buf, m, boolvar), apebs[n0] = mkpeb(aehdr0, avhdr0, buf0, m1, false), wlar[n0] = wl-entry(m4, used), wlar[n] = wl-entry(m0, stat), stat = used, avhdr0.valid?, n0 < # apebs, n < # apebs, bflipset-cons(bflipset, wlar), is-encoded(to-vtbl(vols), buf), unique-sqns(apebs), unmapped-vols(vols), valid-eraseq(wlar, q), valid-eraseq-stronger(apebs, q), valid-wl(apebs, wlar), VTBL_VOLID × VTBL_LNUM ∈ recs0 ⊦ n0 = n, VTBL_VOLID ∈ vols, n ∈ q |
# wlar = # apebs, avhdr0.leb = VTBL_LNUM, avhdr.leb = VTBL_LNUM, avhdr.vol = VTBL_VOLID, avhdr0.vol = VTBL_VOLID, recs0[VTBL_VOLID × VTBL_LNUM] = recovery-entry(n0, m3), apebs[n] = mkpeb(aehdr, avhdr, buf, m, false), apebs[n0] = mkpeb(aehdr0, avhdr0, buf0, m1, false), wlar[n0] = wl-entry(m4, used), wlar[n] = wl-entry(m0, used), avhdr0.valid?, n0 < # apebs, n < # apebs, bflipset-cons(bflipset, wlar), is-encoded(to-vtbl(vols), buf), unique-sqns(apebs), unmapped-vols(vols), valid-eraseq(wlar, q), valid-eraseq-stronger(apebs, q), valid-wl(apebs, wlar), VTBL_VOLID × VTBL_LNUM ∈ recs0 ⊦ n0 = n, VTBL_VOLID ∈ vols, n ∈ q
Used simplifier rules: lf-valid-wl-not-erroneous: n < # wlar, stat ≠ erroneous ⊦ apebs[n] = mkpeb(aehdr, avhdr, buf, m, boolvar) ∧ wlar[n] = wl-entry(m0, stat) ∧ valid-wl(apebs, wlar) → ¬ boolvar;% ⊦ used ≠ erroneous; (s)