| # buf = EB_PAGE_SIZE, # lpt0 = # avol, # avol0 = # avol, wbuf = mkwbuf(buf, m, m1), abs(avol, bleb, wbuf, avol0, rofs), awbuf-inv(avol, bleb), ebm-vol-inv(avol0), bleb ≠ nobuffer → bleb.leb < # avol ∧ wbuf-cons(wbuf, avol0[bleb.leb], rofs) ⊦ ⟪wbuf_enter_readonly#(; ; rofs)⟫ ⟨awbuf_enter_readonly#(adr0, m0, plog0, avol, lpt0, ns0, bleb; ; rofs0)⟩ (abs(avol, bleb, wbuf, avol0, rofs) ∧ (rofs0 ↔ rofs)) |
# avol0 = # avol, # lpt0 = # avol, # buf = EB_PAGE_SIZE, abs(avol, bleb, mkwbuf(buf, m, m1), avol0, rofs), awbuf-inv(avol, bleb), ebm-vol-inv(avol0), bleb ≠ nobuffer → bleb.leb < # avol ∧ wbuf-cons(mkwbuf(buf, m, m1), avol0[bleb.leb], rofs) ⊦ ⟪wbuf_enter_readonly#(; ; rofs)⟫ ⟨awbuf_enter_readonly#(adr0, m0, plog0, avol, lpt0, ns0, bleb; ; rofs0)⟩ (abs(avol, bleb, mkwbuf(buf, m, m1), avol0, rofs) ∧ (rofs0 ↔ rofs))