| # avol0 = # avol2, # lpt1 = # avol2, # buf = EB_PAGE_SIZE, abs(avol2, bleb0, mkwbuf(buf, m2, m3), avol0, rofs0), awbuf-inv(avol2, bleb0), ebm-vol-inv(avol0), avol0 ⊆ avol1, bleb0 ≠ nobuffer → bleb0.leb < # avol2 ∧ wbuf-cons(mkwbuf(buf, m2, m3), avol0[bleb0.leb], rofs0) ⊦ # avol1 = # avol2 ∧ (∀ n. n < # avol2 → avol1[n] ↓ avol2[n]) |
# buf = EB_PAGE_SIZE, # lpt1 = # avol2, # avol0 = # avol2, abs(avol2, bleb0, mkwbuf(buf, m2, m3), avol0, rofs0), awbuf-inv(avol2, bleb0), ebm-vol-inv(avol0), avol0 ⊆ avol1, bleb0 ≠ nobuffer → bleb0.leb < # avol2 ∧ wbuf-cons(mkwbuf(buf, m2, m3), avol0[bleb0.leb], rofs0) ⊦ # avol1 = # avol2 ∧ (n < # avol2 → avol1[n] ↓ avol2[n])