| afs-cons(dirs, files), pre-create(p_inode, dent, md, dirs, files), ¬ ino ∈ dirs, ¬ ino ∈ files, ino ≠ 0 ⊦ ⟪afs_create_ino#(p_inode.ino, md, ino; dent, err, dirs, files)⟫ afs-cons(dirs, files) |
afs-cons(dirs, files), pre-create(p_inode, dent, md, dirs, files) ⊦ ⟪afs_create_ino#(p_inode.ino, md, ino; dent, err, dirs, files)⟫ afs-cons(dirs, files), ino = 0, ino ∈ dirs, ino ∈ files