| # lpt = # avol, # buf0 + n0 = align↓(# buf0 + n, EB_PAGE_SIZE), avol[m1] = mapped(buf0), m1 < # avol, awbuf-inv(avol, buffered(m1)), is-aligned(# buf0 + n0, EB_PAGE_SIZE), avol0 ↓ avol[m1, mapped(buf0 + subarray(buf, 0, n))], n ≤ # buf, # buf0 + n ≤ LEB_SIZE, EB_PAGE_SIZE ≤ # buf0 % EB_PAGE_SIZE + n, n0 ≤ # buf ⊦ subarray(buf0 + subarray(buf, 0, n), 0, align↓(#(buf0 + subarray(buf, 0, n)), EB_PAGE_SIZE)) = buf0 + subarray(buf, 0, n0), is-aligned(# buf0 + n, EB_PAGE_SIZE) |
# lpt = # avol, # buf0 + n0 = align↓(# buf0 + n, EB_PAGE_SIZE), avol[m1] = mapped(buf0), m1 < # avol, awbuf-inv(avol, buffered(m1)), is-aligned(# buf0 + n0, EB_PAGE_SIZE), avol0 ↓ avol[m1, mapped(buf0 + subarray(buf, 0, n))], n ≤ # buf, # buf0 + n ≤ LEB_SIZE, EB_PAGE_SIZE ≤ # buf0 % EB_PAGE_SIZE + n, n0 ≤ # buf ⊦ subarray(subarray(buf, 0, n), 0, n0) = subarray(buf, 0, n0), is-aligned(# buf0 + n, EB_PAGE_SIZE)
Used simplifier rules: ⊦ buf + buf0 = buf + buf1 ↔ buf0 = buf1; (s)%m ≤ # buf ⊦ subarray(buf0 + buf, 0, # buf0 + m) = buf0 + subarray(buf, 0, m); (s)%m ≠ 0 ⊦ align↓(n0 + n1, m) = n2 + n1 → ¬ n0 < n2; (s)% ⊦ EB_PAGE_SIZE ≠ 0; (s)%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ m ≤ n ↔ ¬ n < m; (ss)%append-a: ⊦ (buf + buf0) + buf1 = buf + buf0 + buf1; from specification array-splice[buffer]% ⊦ # subarray(buf, m, n) = n; (s)% ⊦ #(buf + buf0) = # buf + # buf0; (s)