| # buf = EB_PAGE_SIZE, # lpt0 = # avol, # avol0 = # avol, rofs0 ↔ rofs3, rofs1 ↔ rofs3, adr = adr0, lpt = lpt0, m = m0, ns = ns0, plog = plog0, abs(avol, bleb, mkwbuf(buf, m2, m1), avol0, rofs3), awbuf-inv(avol, bleb), ebm-vol-inv(avol0), bleb ≠ nobuffer → bleb.leb < # avol ∧ wbuf-cons(mkwbuf(buf, m2, m1), avol0[bleb.leb], rofs3) ⊦ ⟨rofs := rofs0⟩ (rofs1 ↔ rofs) |