| vols[v0][m] = ⌜n1⌝ ↔ stat1 = used ∧ n1 < # apebs ∧ n1 < # wlar ∧ avhdr.valid? ∧ avhdr.vol = v0 ∧ avhdr.leb = m ∧ n1 ≠ n0, apebs[n1] = mkpeb(aehdr0, avhdr, buf0, m7, boolvar0), vols[v0][m1] = unmapped, apebs[n] = mkpeb(aehdr, avidhdr(v0, m1, m2, m3, m4), buf, m5, boolvar), wlar[n] = wl-entry(m6, stat), wlar[n1] = wl-entry(m9, stat1), m1 < # vols[v0], n < # apebs, n < # wlar, m < # vols[v0], v0 ∈ vols ⊦ vols[v0][m1, ⌜n⌝ ][m] = ⌜n1⌝ ↔ vols[v0][m] = ⌜n1⌝ , n = n0, n1 = n, stat = used |
Used simplifier rules: ⊦ m ≠ n → ebatbl[n, ebae][m] = ebatbl[m]; (s)% ⊦ m < # ebatbl → ebatbl[m, ebae][m] = ebae; (s)% ⊦ ⌜m⌝ = ⌜m0⌝ ↔ m = m0; (s)%lf-02: ⊦ m < n ∧ m = n0 → n0 < n; (forward) from specification nat-basic% ⊦ unmapped ≠ ⌜m⌝ ; (s) Used formulas: m = m1