| # buf = EB_PAGE_SIZE, # lpt0 = # avol, # lpt = # avol, wbuf = mkwbuf(buf, m1, m2), ebm-vol-inv(avol), bleb ≠ nobuffer → bleb.leb < # avol ∧ wbuf-cons(wbuf, avol[bleb.leb], rofs) ⊦ ⟪wbuf_commit#(lpt0, adr, m, avol; ns, adr0, m0, plog, lpt, ns0, rofs; err)⟫ ((bleb ≠ nobuffer → bleb.leb < # avol ∧ wbuf-cons(wbuf, avol[bleb.leb], rofs)) ∧ # lpt = # avol) |
# lpt = # avol, # lpt0 = # avol, # buf = EB_PAGE_SIZE, ebm-vol-inv(avol), bleb ≠ nobuffer → bleb.leb < # avol ∧ wbuf-cons(mkwbuf(buf, m1, m2), avol[bleb.leb], rofs) ⊦ ⟪wbuf_commit#(lpt0, adr, m, avol; ns, adr0, m0, plog, lpt, ns0, rofs; err)⟫ ((bleb ≠ nobuffer → bleb.leb < # avol ∧ wbuf-cons(mkwbuf(buf, m1, m2), avol[bleb.leb], rofs)) ∧ # lpt = # avol)