| # apebs = # wlar, # wlar0 = # wlar, wlar[n0] = wl-entry(m7, used), vols[v][m0] = ⌜n0⌝ , apebs[n] = mkpeb(aehdr, avhdr, buf, m, boolvar), apebs[n0] = mkpeb(aehdr0, avhdr0, buf0, m2, false), recs1[v × m0] = recovery-entry(m3, m4), avhdr0 = avidhdr(v, m0, m1, m5, m6), avhdr0.valid?, n0 < # wlar, m0 < # vols[v], bflipset-cons(bflipset, wlar), bflipset-cons(bflipset0, wlar0), is-encoded(vtbl, buf), unique-sqns(apebs), unmapped-vols(vols0), valid-eraseq(wlar, q), valid-eraseq(wlar0, q1), valid-eraseq-strong(apebs, vtbl, q), valid-eraseq-stronger(apebs, q1), valid-peb(mkpeb(aehdr0, avhdr0, buf0, m2, false)), valid-recs(apebs, wlar0, recs0), valid-vtbl(apebs, vols, wlar, n), valid-vtbl(apebs, vols0, wlar0, n), valid-wl(apebs, wlar), valid-wl(apebs, wlar0), v ∈ vols, v × m0 ∈ recs1, q1 ⊆ q, recs1 ⊥ vols ⊦ m3 = n0, n0 = n, recs1 = ∅, n ∈ q1, VTBL_VOLID ∈ vols, VTBL_VOLID × VTBL_LNUM ∈ recs1, VTBL_VOLID ∈ vols0, n0 ∈ q |
# apebs = # wlar, # wlar0 = # wlar, wlar[n0] = wl-entry(m7, used), vols[v][m0] = ⌜n0⌝ , apebs[n] = mkpeb(aehdr, avhdr, buf, m, boolvar), apebs[n0] = mkpeb(aehdr0, avidhdr(v, m0, m1, m5, m6), buf0, m2, false), recs1[v × m0] = recovery-entry(m3, m4), n0 < # wlar, m0 < # vols[v], bflipset-cons(bflipset, wlar), bflipset-cons(bflipset0, wlar0), is-encoded(vtbl, buf), unique-sqns(apebs), unmapped-vols(vols0), valid-eraseq(wlar, q), valid-eraseq(wlar0, q1), valid-eraseq-strong(apebs, vtbl, q), valid-eraseq-stronger(apebs, q1), valid-peb(mkpeb(aehdr0, avidhdr(v, m0, m1, m5, m6), buf0, m2, false)), valid-recs(apebs, wlar0, recs0), valid-vtbl(apebs, vols, wlar, n), valid-vtbl(apebs, vols0, wlar0, n), valid-wl(apebs, wlar), valid-wl(apebs, wlar0), v ∈ vols, v × m0 ∈ recs1, q1 ⊆ q, recs1 ⊥ vols ⊦ m3 = n0, n0 = n, recs1 = ∅, n ∈ q1, VTBL_VOLID ∈ vols, VTBL_VOLID × VTBL_LNUM ∈ recs1, VTBL_VOLID ∈ vols0, n0 ∈ q
Used simplifier rules: lf-used-valid-peb: ⊦ n < # wlar ∧ wlar[n] = wl-entry(m, used) ∧ apebs[n] = apeb ∧ valid-wl(apebs, wlar) → valid-peb(apeb);% ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic% ⊦ avidhdr(v, m, m0, m1, m2).valid?; (s)