| awbuf-inv(avol, buffered(n)) ⊦ n < # avol ∧ avol[n].mapped? |
avol[n] = unmapped, n < # avol, awbuf-inv(avol, buffered(n)) ⊦
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic% ⊦ aleb.mapped? ↔ aleb ≠ unmapped; (ss)%inv-buf-in-vol: ⊦ awbuf-inv(avol, buffered(n)) → n < # avol; (forward) from specification awbuf-inv