| # links(entries2[str], dirs0) = m12 + 1, (entries2[str0] = entries2[str] ⊃ mkdir(m13, md, m12, m15, ∅) ;(entries2[str0] = m ⊃ mkdir(m8, md1, # links(entries2[str0], dirs0), m11, (entries2 -- str0)[str, entries2[str0]]) ;mkdir(# entries1, md3, # links(entries2[str0], dirs0), # subdirs(entries2[str0], dirs0), entries1) ) ) = mkdir(m20, md10, m21, m22, entries5), files[entries2[str0]] = mkfile(m14, md8, m16, content), dirs0[entries2[str0]] = mkdir(# entries1, md3, # links(entries2[str0], dirs0), # subdirs(entries2[str0], dirs0), entries1), dirs0[m] = mkdir(m8 + 1, md0, # links(m, dirs0), m11 + 1, entries2), dirs0[entries2[str]] = mkdir(m13, md6, m12 + 1, m15, ∅), afs-cons(dirs0, files), ROOT_INO ∈ dirs0, entries2[str] ∈ dirs0, str0 ∈ entries2, str ∈ entries2, m ∈ dirs0, entries2[str0] ∈ dirs0, # links(entries2[str0], dirs0) ≤ 1, name ∈ entries1 → entries1[name] ∈ dirs0 ∨ entries1[name] ∈ files, links(m, dirs0) ≠ ∅ ∨ m = ROOT_INO ⊦ #((links(entries2[str0], dirs0) -- mklink(m, str0)) ++ mklink(m, str)) = 1, #((links(entries2[str0], dirs0) -- mklink(m, str0)) ++ mklink(m, str)) = 0, entries2[str] = ROOT_INO, entries2[str] = m, mkdentry(str, entries2[str]) = mkdentry(str0, entries2[str0]) |
# links(entries2[str], dirs0) = m12 + 1, (entries2[str0] = entries2[str] ⊃ mkdir(m13, md, m12, m15, ∅) ;(entries2[str0] = m ⊃ mkdir(m8, md1, # links(entries2[str0], dirs0), m11, (entries2 -- str0)[str, entries2[str0]]) ;mkdir(# entries1, md3, # links(entries2[str0], dirs0), # subdirs(entries2[str0], dirs0), entries1) ) ) = mkdir(m20, md10, m21, m22, entries5), dirs0[entries2[str]] = mkdir(m13, md6, m12 + 1, m15, ∅), dirs0[m] = mkdir(m8 + 1, md0, # links(m, dirs0), m11 + 1, entries2), dirs0[entries2[str0]] = mkdir(# entries1, md3, # links(entries2[str0], dirs0), # subdirs(entries2[str0], dirs0), entries1), files[entries2[str0]] = mkfile(m14, md8, m16, content), afs-cons(dirs0, files), entries2[str0] ∈ dirs0, m ∈ dirs0, str ∈ entries2, str0 ∈ entries2, entries2[str] ∈ dirs0, ROOT_INO ∈ dirs0, # links(entries2[str0], dirs0) ≤ 1, name ∈ entries1 → entries1[name] ∈ dirs0 ∨ entries1[name] ∈ files, links(m, dirs0) ≠ ∅ ∨ m = ROOT_INO ⊦ #((links(entries2[str0], dirs0) -- mklink(m, str0)) ++ mklink(m, str)) = 0, #((links(entries2[str0], dirs0) -- mklink(m, str0)) ++ mklink(m, str)) = 1, entries2[str] = m, entries2[str] = ROOT_INO, mkdentry(str, entries2[str]) = mkdentry(str0, entries2[str0]), mklink(m, str) ∈ links(entries2[str0], dirs0) -- mklink(m, str0)
Used simplifier rules: lastlink-move: ⊦ # links(entries0[str0], dirs) = 1 ∧ ino0 ∈ dirs ∧ dirs[ino0] = mkdir(m0, md0, n0, n2, entries0) ∧ ino1 ∈ dirs ∧ dirs[ino1] = mkdir(m1, md1, n1, n3, entries1) ∧ str0 ∈ entries0 ∧ str1 ∈ entries1 → (entries0[str0] = entries1[str1] ↔ str0 = str1 ∧ ino0 = ino1);% ⊦ alink ∈ ls → ls ++ alink = ls; (s)% ⊦ alink ∈ ls -- alink0 ↔ alink ≠ alink0 ∧ alink ∈ ls; (s)%⊦ alink ∈ links(ino, dirs) ↔ alink.pino ∈ dirs ∧ alink.name ∈ dirs[alink.pino].entries ∧ ino = dirs[alink.pino].entries[alink.name]; (s)% ⊦ mklink(m, str).pino = m; (s)% ⊦ mklink(m, str).name = str; (s)%size-zero: ⊦ # ls ≠ 0 → ls ≠ ∅; (forward) from specification set-basic[alink-set]% ⊦ mkdir(m, md, m0, m1, entries).entries = entries; (s)%⊦ mkdir(m, md, m0, m1, entries) = mkdir(m2, md0, m3, m4, entries0) ↔ m = m2 ∧ md = md0 ∧ m0 = m3 ∧ m1 = m4 ∧ entries = entries0; (ws)% ⊦ ls -- alink = ∅ ↔ ls = ∅ ∨ ls = ∅ ++ alink; (ws)%⊦ p_ino ∈ dirs ∧ dirs[p_ino] = mkdir(m, md, n, n0, entries) ∧ str ∈ entries → links(entries[str], dirs) ≠ ∅; (s)% ⊦ mkdentry(str, m) = mkdentry(str0, m0) ↔ str = str0 ∧ m = m0; (ws)% ⊦ # ∅ = 0; (s)% ⊦ m + 1 ≤ n ↔ m < n; (s)% ⊦ m < 1 ↔ m = 0; (s)%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic%c: ⊦ m + n = n + m; from specification nat-basic% ⊦ ¬ str ∈ ∅; (s) Used formulas: mklink(m, str) ∈ links(entries2[str0], dirs0) -- mklink(m, str0)