| # avol0 = # avol, # lpt0 = # avol, # buf = EB_PAGE_SIZE, avol0[m] = mapped(buf0), m < # avol, abs(avol, buffered(m), mkwbuf(buf, m2, m1), avol0, false), awbuf-inv(avol, buffered(m)), ebm-vol-inv(avol0), synced(avol), wbuf-cons(mkwbuf(buf, m2, m1), mapped(buf0), false) ⊦ # avol = # avol0 ∧ (∀ n. n < # avol → avol[n] = avol0[n]) |
# avol0 = # avol, # lpt0 = # avol, # buf = EB_PAGE_SIZE, avol0[m] = mapped(buf0), n < # avol, m < # avol, abs(avol, buffered(m), mkwbuf(buf, m2, m1), avol0, false), awbuf-inv(avol, buffered(m)), ebm-vol-inv(avol0), synced(avol), wbuf-cons(mkwbuf(buf, m2, m1), mapped(buf0), false) ⊦ avol[n] = avol0[n]
Used simplifier rules: lf-01: ⊦ m < n ∧ n = n0 → m < n0; (forward) from specification nat-basic