| # lpt = # avol, # buf0 + n0 = align↓(# buf0 + n, EB_PAGE_SIZE), avol[m1] = mapped(buf0), m1 < # avol, awbuf-inv(avol, buffered(m1)), avol0 ↓ avol[m1, mapped(buf0 + subarray(buf, 0, n))], n ≤ # buf, # buf0 + n ≤ LEB_SIZE, EB_PAGE_SIZE ≤ # buf0 % EB_PAGE_SIZE + n ⊦ buffered(m1).isbuf?, is-aligned(# buf0 + n, EB_PAGE_SIZE) |
Used simplifier rules: m ≠ 0, is-aligned(n1, m) ⊦ is-aligned(n0 + n1, m) ↔ is-aligned(n0, m); (s)%# buf = n ⊦ subarray(buf, 0, n) = buf; (s)% ⊦ m ≠ n → (m ≤ n ↔ m < n); (s)%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ m + n = m + n0 ↔ n = n0; (s)%n ≠ 0, m % n = 0 ⊦ align↓(m, n) = m; (s)% ⊦ buffered(m).isbuf?; (s)% ⊦ EB_PAGE_SIZE ≠ 0; (s)