| # apebs = n0 + vtblpnum, # wlar = n0 + vtblpnum, apebs[vtblpnum] = mkpeb(aehdr, avhdr, buf, m, boolvar), boolvar, nx < vtblpnum, bflipset-cons(bflipset, subarray(wlar, 0, vtblpnum)), indices-erasing(wlar, nx), ubi-io-inv(apebs), unique-sqns(apebs), valid-eraseq(subarray(wlar, 0, vtblpnum), q), valid-eraseq-stronger(subarray(apebs, 0, vtblpnum), q), valid-global-sqn(subarray(apebs, 0, vtblpnum), sqnum), valid-recs(subarray(apebs, 0, vtblpnum), subarray(wlar, 0, vtblpnum), recs), valid-recs-sqns(apebs, recs), valid-wl(subarray(apebs, 0, vtblpnum), subarray(wlar, 0, vtblpnum)) ⊦ n0 = 0, dups(nx), valid-global-sqn(subarray(apebs, 0, vtblpnum + 1), sqnum) ∧ valid-wl(subarray(apebs, 0, vtblpnum + 1), subarray(wlar[vtblpnum, wl-entry(wlar[vtblpnum].ec, erroneous)], 0, vtblpnum + 1)) |
# wlar = n0 + vtblpnum, # apebs = n0 + vtblpnum, apebs[vtblpnum] = mkpeb(aehdr, avhdr, buf, m, true), nx < vtblpnum, bflipset-cons(bflipset, subarray(wlar, 0, vtblpnum)), indices-erasing(wlar, nx), ubi-io-inv(apebs), ubi-io-peb-inv(mkpeb(aehdr, avhdr, buf, m, true)), unique-sqns(apebs), valid-eraseq(subarray(wlar, 0, vtblpnum), q), valid-eraseq-stronger(subarray(apebs, 0, vtblpnum), q), valid-global-sqn(subarray(apebs, 0, vtblpnum), sqnum), valid-recs(subarray(apebs, 0, vtblpnum), subarray(wlar, 0, vtblpnum), recs), valid-recs-sqns(apebs, recs), valid-wl(subarray(apebs, 0, vtblpnum), subarray(wlar, 0, vtblpnum)) ⊦ n0 = 0, dups(nx), valid-global-sqn(subarray(apebs, 0, vtblpnum + 1), sqnum) ∧ valid-wl(subarray(apebs, 0, vtblpnum + 1), subarray(wlar[vtblpnum, wl-entry(wlar[vtblpnum].ec, erroneous)], 0, vtblpnum + 1))
Used simplifier rules: ubi-io-inv-fwd: n < # apebs ⊦ apebs[n] = apeb ∧ ubi-io-inv(apebs) → ubi-io-peb-inv(apeb);%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ m + m0 ≤ m ↔ m0 = 0; (s)% ⊦ m < n ↔ ¬ n ≤ m; (ss)