| synced(avol) ⊦ synced(avol[n, unmapped]) |
avol[n, unmapped][n0] = mapped(buf), n0 < # avol, ∀ n. n < # avol ∧ avol[n].mapped? → is-aligned(# avol[n].data, EB_PAGE_SIZE) ⊦ is-aligned(# avol[n0].data, EB_PAGE_SIZE)
Used simplifier rules: synced: ⊦ synced(avol) ↔ (∀ n. n < # avol ∧ avol[n].mapped? → is-aligned(# avol[n].data, EB_PAGE_SIZE));% ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic% ⊦ aleb.mapped? ↔ (∃ buf. aleb = mapped(buf)); (as)%m ≠ n ⊦ avol[m, aleb][n] = avol[n]; (s)% ⊦ ¬ unmapped.mapped?; (s)% ⊦ m < # avol → avol[m, aleb][m] = aleb; (s)% ⊦ # avol[n, aleb] = # avol; (s)