| # avol0 = # avol1, # lpt0 = # avol1, # buf1 = EB_PAGE_SIZE, avol0[m4] = mapped(buf2), avol1[m4] = mapped(buf2 + subarray(buf1, 0, m2)), align↓(m2 + n3, EB_PAGE_SIZE) = n + m2, m2 < EB_PAGE_SIZE, m4 < # avol1, awbuf-inv(avol1, buffered(m4)), ebm-vol-inv(avol0), is-aligned(n + m2, EB_PAGE_SIZE), is-aligned(# buf2, EB_PAGE_SIZE), n3 ≤ # buf3, EB_PAGE_SIZE ≤ m2 + n3, # buf2 + m2 + n3 ≤ LEB_SIZE, n ≤ # buf3, # buf2 + n + m2 ≤ LEB_SIZE, n + (m2 + n3) % EB_PAGE_SIZE ≤ # buf3, (# buf2 + m2) + n3 ≤ LEB_SIZE, 0 + n ≤ # buf3, 0 + n ≤ # subarray(mkbuf(n + m2), m2, n) ⊦ n + m2 = 0, n3 = 0, subarray(buf3, 0, n3) = ( subarray(subarray(mkbuf(n + m2), m2, n), 0, 0) + subarray(buf3, 0, n) + subarray(subarray(mkbuf(n + m2), m2, n), 0 + n, # subarray(mkbuf(n + m2), m2, n) - 0 - n)) + subarray(buf3, n, (m2 + n3) % EB_PAGE_SIZE) |
# buf1 = EB_PAGE_SIZE, # lpt0 = # avol1, # avol0 = # avol1, avol1[m4] = mapped(buf2 + subarray(buf1, 0, m2)), avol0[m4] = mapped(buf2), align↓(m2 + n3, EB_PAGE_SIZE) = n + m2, m4 < # avol1, m2 < EB_PAGE_SIZE, awbuf-inv(avol1, buffered(m4)), ebm-vol-inv(avol0), is-aligned(# buf2, EB_PAGE_SIZE), is-aligned(n + m2, EB_PAGE_SIZE), (# buf2 + m2) + n3 ≤ LEB_SIZE, n + (m2 + n3) % EB_PAGE_SIZE ≤ # buf3, # buf2 + n + m2 ≤ LEB_SIZE, # buf2 + m2 + n3 ≤ LEB_SIZE, EB_PAGE_SIZE ≤ m2 + n3, n3 ≤ # buf3, n ≤ # buf3 ⊦ n + m2 = 0, n3 = 0, n3 = n + (m2 + n3) % EB_PAGE_SIZE
Used simplifier rules: ⊦ m ≤ m; (s)% ⊦ subarray(buf, n0, n1) = subarray(buf, n0, n2) ↔ n1 = n2; (ss)%append-a: ⊦ (buf + buf0) + buf1 = buf + buf0 + buf1; from specification array-splice[buffer]%⊦ n0 + n1 ≤ # buf → subarray(buf, 0, n0) + subarray(buf, n0, n1) = subarray(buf, 0, n0 + n1); (s)% ⊦ mkbuf(0) + buf = buf; (s)% ⊦ m - m = 0; (s)% ⊦ m - 0 = m; (s)% ⊦ # subarray(buf, m, n) = n; (s)%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ n + 0 = n; (s)% ⊦ subarray(buf, n, 0) = mkbuf(0); (s)