| ∀ n. n < # avol ∧ avol[n].mapped? → is-aligned(# avol[n].data, EB_PAGE_SIZE), ∀ n0. n0 < # avol ∧ avol[n, mapped(buf)][n0].mapped? → is-aligned(# avol[n, mapped(buf)][n0].data, EB_PAGE_SIZE) ⊦ is-aligned(# buf, EB_PAGE_SIZE), # avol ≤ n |
n < # avol, ∀ n. n < # avol ∧ avol[n].mapped? → is-aligned(# avol[n].data, EB_PAGE_SIZE), ∀ n0. n0 < # avol ∧ avol[n, mapped(buf)][n0].mapped? → is-aligned(# avol[n, mapped(buf)][n0].data, EB_PAGE_SIZE) ⊦ is-aligned(# buf, EB_PAGE_SIZE)
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic% ⊦ m ≤ n ↔ ¬ n < m; (ss)