| (ino0 = ino ⊃ mkdir(0, md, 1, 0, ∅);(dirs[m, mkdir(m0 + 1, md0, # links(m, dirs), m2 + 1, entries[str, ino])] ++ ino)[ino0]) = mkdir(m7, md3, m8, m9, entries1), dirs[m] = mkdir(m0, md0, # links(m, dirs), m2, entries), files[ino0] = mkfile(m1, md1, m3, content), dirs[ino0] = mkdir(m4, md2, m5, m6, entries0), afs-cons(dirs, files), m ∈ dirs, ROOT_INO ∈ dirs, ino0 ∈ dirs → m5 = # links(ino0, dirs) ∧ # links(ino0, dirs) ≤ 1 ∧ m4 = # entries0 ∧ m6 = # subdirs(ino0, dirs), ino0 ∈ dirs ∧ ino0 ≠ ROOT_INO ∧ links(ino0, dirs) = ∅ → entries0 = ∅, ino0 ∈ files → ¬ ino0 ∈ dirs ∧ m3 = # links(ino0, dirs), ino0 ∈ dirs ∧ name ∈ entries0 → entries0[name] ∈ dirs ∨ entries0[name] ∈ files, links(m, dirs) ≠ ∅ ∨ m = ROOT_INO ⊦ ino = 0, ino ∈ files, ino ∈ dirs, str ∈ entries, ino ∈ dirs[m, mkdir(m0 + 1, md0, # links(m, dirs), m2 + 1, entries[str, ino])], ( (ino0 = ino ∨ ino0 ∈ dirs) ∧ ino0 ≠ ROOT_INO ∧ links(ino0, dirs[m, mkdir(m0 + 1, md0, # links(m, dirs), m2 + 1, entries[str, ino])]) = ∅ → entries1 = ∅) ∧ ( ino0 = ino ∨ ino0 ∈ dirs → ¬ ino0 ∈ files ∧ m8 = # links(ino0, dirs[m, mkdir(m0 + 1, md0, # links(m, dirs), m2 + 1, entries[str, ino])]) ∧ # links(ino0, dirs[m, mkdir(m0 + 1, md0, # links(m, dirs), m2 + 1, entries[str, ino])]) ≤ 1 ∧ m7 = # entries1 ∧ m9 = # subdirs(ino0, (dirs[m, mkdir(m0 + 1, md0, # links(m, dirs), m2 + 1, entries[str, ino])] ++ ino)[ino, mkdir(0, md, 1, 0, ∅)])) ∧ (ino0 ∈ files → ¬ ino0 ∈ dirs ∧ m3 = # links(ino0, dirs[m, mkdir(m0 + 1, md0, # links(m, dirs), m2 + 1, entries[str, ino])])) ∧ ((ino0 = ino ∨ ino0 ∈ dirs) ∧ name ∈ entries1 → entries1[name] = ino ∨ entries1[name] ∈ dirs ∨ entries1[name] ∈ files) |
(ino0 = ino ⊃ mkdir(0, md, 1, 0, ∅);(dirs[m, mkdir(m0 + 1, md0, # links(m, dirs), m2 + 1, entries[str, ino])] ++ ino)[ino0]) = mkdir(m7, md3, m8, m9, entries1), dirs[ino0] = mkdir(m4, md2, m5, m6, entries0), files[ino0] = mkfile(m1, md1, m3, content), dirs[m] = mkdir(m0, md0, # links(m, dirs), m2, entries), afs-cons(dirs, files), ROOT_INO ∈ dirs, m ∈ dirs, ino0 ∈ dirs ∧ name ∈ entries0 → entries0[name] ∈ dirs ∨ entries0[name] ∈ files, ino0 ∈ files → ¬ ino0 ∈ dirs ∧ m3 = # links(ino0, dirs), ino0 ∈ dirs ∧ ino0 ≠ ROOT_INO ∧ links(ino0, dirs) = ∅ → entries0 = ∅, ino0 ∈ dirs → m5 = # links(ino0, dirs) ∧ # links(ino0, dirs) ≤ 1 ∧ m4 = # entries0 ∧ m6 = # subdirs(ino0, dirs), links(m, dirs) ≠ ∅ ∨ m = ROOT_INO ⊦ ino = 0, str ∈ entries, ino ∈ files, ino ∈ dirs, ((ino0 = ino ∨ ino0 ∈ dirs) ∧ ino0 ≠ ROOT_INO ∧ (ino = ino0 ⊃ ∅ ++ mklink(m, str);links(ino0, dirs)) = ∅ → entries1 = ∅) ∧ ( ino0 = ino ∨ ino0 ∈ dirs → ¬ ino0 ∈ files ∧ m8 = # (ino = ino0 ⊃ ∅ ++ mklink(m, str);links(ino0, dirs)) ∧ # (ino = ino0 ⊃ ∅ ++ mklink(m, str);links(ino0, dirs)) ≤ 1 ∧ m7 = # entries1 ∧ m9 = # subdirs(ino0, (dirs[m, mkdir(m0 + 1, md0, # links(m, dirs), m2 + 1, entries[str, ino])] ++ ino)[ino, mkdir(0, md, 1, 0, ∅)])) ∧ ((ino0 = ino ∨ ino0 ∈ dirs) ∧ name ∈ entries1 → entries1[name] = ino ∨ entries1[name] ∈ dirs ∨ entries1[name] ∈ files)
Used simplifier rules: c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic%⊦ afs-cons(dirs, files) ∧ ¬ ino ∈ dirs ∧ ¬ ino ∈ files → links(ino, dirs) = ∅; (s)%⊦ ino ∈ dirs ∧ dirs[ino] = mkdir(m0, md0, n1, n2, entries) → links(ino0, dirs[ino, mkdir(m, md, n, n0, entries)]) = links(ino0, dirs); (s)%⊦ p_ino ∈ dirs → links (ino0, dirs[p_ino, mkdir(m0, md, n, n0, entries[str, ino])]) = (ino = ino0 ⊃ links(ino0, dirs[p_ino, mkdir(m0, md, n, n0, entries)]) ++ mklink(p_ino, str) ;(str ∈ entries ∧ entries[str] = ino0 ⊃ links(ino0, dirs[p_ino, mkdir(m0, md, n, n0, entries)]) -- mklink(p_ino, str) ;links(ino0, dirs[p_ino, mkdir(m0, md, n, n0, entries)]) ) ); (s)%⊦ p_ino ∈ dirs → links(ino, dirs[p_ino, mkdir(m0, md, n0, n1 + 1, entries)]) = links(ino, dirs[p_ino, mkdir(m0, md, n0, n1, entries)]); (s)% ⊦ ino ∈ dirs[ino0, ad] ↔ ino ∈ dirs; (s)