| ∀ n. n < # avol ∧ avol[n].mapped? → is-aligned(# avol[n].data, EB_PAGE_SIZE), # avol ≤ n ∨ is-aligned(# buf, EB_PAGE_SIZE) ⊦ ∀ n0. n0 < # avol ∧ avol[n, mapped(buf)][n0].mapped? → is-aligned(# avol[n, mapped(buf)][n0].data, EB_PAGE_SIZE) |
avol[n, mapped(buf)][n0] = mapped(buf0), n0 < # avol, ∀ n. n < # avol ∧ avol[n].mapped? → is-aligned(# avol[n].data, EB_PAGE_SIZE), # avol ≤ n ∨ is-aligned(# buf, EB_PAGE_SIZE) ⊦ is-aligned(# buf0, EB_PAGE_SIZE)
Used simplifier rules: ⊦ mapped(buf).data = buf; (s)% ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic% ⊦ aleb.mapped? ↔ (∃ buf. aleb = mapped(buf)); (as)