| awbuf-inv(avol, buffered(n)) ⊦ n < # avol |
Used simplifier rules: awbuf-inv-def: ⊦ awbuf-inv(avol, bleb) ↔ ¬ ¬ ( (∀ n. n < # avol ∧ avol[n].mapped? → # avol[n].data ≤ LEB_SIZE ∧ ( buffered(n) ≠ bleb → is-aligned(# avol[n].data, EB_PAGE_SIZE))) ∧ (bleb ≠ nobuffer → bleb.leb < # avol ∧ avol[bleb.leb].mapped?));% ⊦ buffered(m).leb = m; (s)% ⊦ nobuffer ≠ buffered(m); (s)% ⊦ buffered(m) = buffered(m0) ↔ m = m0; (s)