| # avol0 = # avol, # lpt0 = # avol, # buf = EB_PAGE_SIZE, abs(avol, bleb, mkwbuf(buf, m, m1), avol0, rofs), awbuf-inv(avol, bleb), ebm-vol-inv(avol0), bleb ≠ nobuffer → bleb.leb < # avol ∧ wbuf-cons(mkwbuf(buf, m, m1), avol0[bleb.leb], rofs) ⊦ ⟪wbuf_is_readonly#(rofs; ; rofs1)⟫ ⟨awbuf_is_readonly#(adr0, m0, plog0, avol, lpt0, ns0, bleb, rofs; ; rofs2)⟩ (rofs1 ↔ rofs2) |
# buf = EB_PAGE_SIZE, # lpt0 = # avol, # avol0 = # avol, rofs0 ↔ rofs3, abs(avol, bleb, mkwbuf(buf, m, m1), avol0, rofs3), awbuf-inv(avol, bleb), ebm-vol-inv(avol0), bleb ≠ nobuffer → bleb.leb < # avol ∧ wbuf-cons(mkwbuf(buf, m, m1), avol0[bleb.leb], rofs3) ⊦ ⟪rofs := rofs0⟫ ⟨awbuf_is_readonly#(adr0, m0, plog0, avol, lpt0, ns0, bleb, rofs3; ; rofs2)⟩ (rofs ↔ rofs2)
Used simplifier rules: wbuf_is_readonly#(ROFS; ; ROFS0){ROFS0 := ROFS};