| # apebs0 = # wlar0, # wlar = # wlar0, abs(avols0, apebs0, vols, q), bflipset-cons(bflipset, wlar), bflipset-cons(bflipset0, wlar0), ebm-cons(avols0), is-max(apebs0, vols0, wlar0, q0, bflipset0, vtblpnum3, sqnum), ubi-io-inv(apebs0), unique-sqns(apebs0), valid-ebatbl(apebs0, wlar, vols, vtblpnum), valid-ebatbl(apebs0, wlar0, vols0, vtblpnum3), valid-eraseq(q), valid-eraseq(wlar, q), valid-eraseq(apebs0, q), valid-eraseq(q0), valid-eraseq(wlar0, q0), valid-eraseq(apebs0, q0), valid-global-sqn(apebs0, vtblpnum0), valid-global-sqn(apebs0, sqnum), valid-vtbl(apebs0, vols, wlar, vtblpnum), valid-vtbl(apebs0, vols0, wlar0, vtblpnum3), valid-wl(apebs0, wlar), valid-wl(apebs0, wlar0), q0.lebrefs ⊆ q.lebrefs, vols ⊆ vols0, vols0⌈vols, q⌉ ⊦ avols0 ⊆ absf(avols0, apebs0, vols0, q0) ∧ ebm-cons(absf(avols0, apebs0, vols0, q0)) ∧ ⟨avols := absf(avols0, apebs0, vols0, q0); ebm_recover#(; avols; err0)⟩ (abs(avols, apebs0, vols0, q0) ∧ ESUCCESS = err0), VTBL_VOLID ∈ vols0, VTBL_VOLID ∈ vols |
# wlar = # wlar0, # apebs0 = # wlar0, abs(avols0, apebs0, vols, q), bflipset-cons(bflipset0, wlar0), bflipset-cons(bflipset, wlar), ebm-cons(avols0), is-max(apebs0, vols0, wlar0, q0, bflipset0, vtblpnum3, sqnum), ubi-io-inv(apebs0), unique-sqns(apebs0), valid-ebatbl(apebs0, wlar0, vols0, vtblpnum3), valid-ebatbl(apebs0, wlar, vols, vtblpnum), valid-eraseq(apebs0, q0), valid-eraseq(wlar0, q0), valid-eraseq(q0), valid-eraseq(apebs0, q), valid-eraseq(wlar, q), valid-eraseq(q), valid-global-sqn(apebs0, sqnum), valid-global-sqn(apebs0, vtblpnum0), valid-vtbl(apebs0, vols0, wlar0, vtblpnum3), valid-vtbl(apebs0, vols, wlar, vtblpnum), valid-wl(apebs0, wlar0), valid-wl(apebs0, wlar), vols ⊆ vols0, q0.lebrefs ⊆ q.lebrefs, vols0⌈vols, q⌉ ⊦ VTBL_VOLID ∈ vols, VTBL_VOLID ∈ vols0, avols0 ⊆ absf(avols0, apebs0, vols0, q0)
# wlar = # wlar0, # apebs0 = # wlar0, abs(avols0, apebs0, vols, q), bflipset-cons(bflipset0, wlar0), bflipset-cons(bflipset, wlar), ebm-cons(avols0), is-max(apebs0, vols0, wlar0, q0, bflipset0, vtblpnum3, sqnum), ubi-io-inv(apebs0), unique-sqns(apebs0), valid-ebatbl(apebs0, wlar0, vols0, vtblpnum3), valid-ebatbl(apebs0, wlar, vols, vtblpnum), valid-eraseq(apebs0, q0), valid-eraseq(wlar0, q0), valid-eraseq(q0), valid-eraseq(apebs0, q), valid-eraseq(wlar, q), valid-eraseq(q), valid-global-sqn(apebs0, sqnum), valid-global-sqn(apebs0, vtblpnum0), valid-vtbl(apebs0, vols0, wlar0, vtblpnum3), valid-vtbl(apebs0, vols, wlar, vtblpnum), valid-wl(apebs0, wlar0), valid-wl(apebs0, wlar), vols ⊆ vols0, q0.lebrefs ⊆ q.lebrefs, vols0⌈vols, q⌉ ⊦ ebm-cons(absf(avols0, apebs0, vols0, q0)), VTBL_VOLID ∈ vols, VTBL_VOLID ∈ vols0
# wlar = # wlar0, # apebs0 = # wlar0, abs(avols0, apebs0, vols, q), bflipset-cons(bflipset0, wlar0), bflipset-cons(bflipset, wlar), ebm-cons(avols0), is-max(apebs0, vols0, wlar0, q0, bflipset0, vtblpnum3, sqnum), ubi-io-inv(apebs0), unique-sqns(apebs0), valid-ebatbl(apebs0, wlar0, vols0, vtblpnum3), valid-ebatbl(apebs0, wlar, vols, vtblpnum), valid-eraseq(apebs0, q0), valid-eraseq(wlar0, q0), valid-eraseq(q0), valid-eraseq(apebs0, q), valid-eraseq(wlar, q), valid-eraseq(q), valid-global-sqn(apebs0, sqnum), valid-global-sqn(apebs0, vtblpnum0), valid-vtbl(apebs0, vols0, wlar0, vtblpnum3), valid-vtbl(apebs0, vols, wlar, vtblpnum), valid-wl(apebs0, wlar0), valid-wl(apebs0, wlar), vols ⊆ vols0, q0.lebrefs ⊆ q.lebrefs, vols0⌈vols, q⌉ ⊦ ⟨avols := absf(avols0, apebs0, vols0, q0); ebm_recover#(; avols; err0)⟩ (abs(avols, apebs0, vols0, q0) ∧ ESUCCESS = err0), VTBL_VOLID ∈ vols, VTBL_VOLID ∈ vols0