| (entries2[str] = m0 ⊃ mkdir(m4 + 1, md1, # links(entries2[str], dirs0), m7 + 1, (entries2 -- str)[str0, entries2[str]]) ;mkdir(# entries1, md4, # links(entries2[str], dirs0), # subdirs(entries2[str], dirs0), entries1) ) = mkdir(m15, md7, m16, m17, entries4), dirs0[m0] = mkdir(m4 + 1, md, # links(m0, dirs0), m7 + 1, entries2), files[entries2[str]] = mkfile(m9, md2, m11, content), dirs0[entries2[str]] = mkdir(# entries1, md4, # links(entries2[str], dirs0), # subdirs(entries2[str], dirs0), entries1), afs-cons(dirs0, files), entries2[str] ∈ dirs0, ROOT_INO ∈ dirs0, m0 ∈ dirs0, str ∈ entries2, # links(entries2[str], dirs0) ≤ 1, name ∈ entries1 → entries1[name] ∈ dirs0 ∨ entries1[name] ∈ files, links(m0, dirs0) ≠ ∅ ∨ m0 = ROOT_INO ⊦ #((links(entries2[str], dirs0) -- mklink(m0, str)) ++ mklink(m0, str0)) = 0, #((links(entries2[str], dirs0) -- mklink(m0, str)) ++ mklink(m0, str0)) = 1, str0 ∈ entries2, mklink(m0, str0) ∈ links(entries2[str], dirs0) -- mklink(m0, str) |
(entries2[str] = m0 ⊃ mkdir(m4 + 1, md1, # links(entries2[str], dirs0), m7 + 1, (entries2 -- str)[str0, entries2[str]]) ;mkdir(# entries1, md4, # links(entries2[str], dirs0), # subdirs(entries2[str], dirs0), entries1) ) = mkdir(m15, md7, m16, m17, entries4), dirs0[m0] = mkdir(m4 + 1, md, # links(m0, dirs0), m7 + 1, entries2), files[entries2[str]] = mkfile(m9, md2, m11, content), dirs0[entries2[str]] = mkdir(# entries1, md4, # links(entries2[str], dirs0), # subdirs(entries2[str], dirs0), entries1), afs-cons(dirs0, files), entries2[str] ∈ dirs0, ROOT_INO ∈ dirs0, m0 ∈ dirs0, str ∈ entries2, # links(entries2[str], dirs0) ≤ 1, name ∈ entries1 → entries1[name] ∈ dirs0 ∨ entries1[name] ∈ files, links(m0, dirs0) ≠ ∅ ∨ m0 = ROOT_INO ⊦ #(links(entries2[str], dirs0) -- mklink(m0, str)) = 0, links(entries2[str], dirs0) = ∅ ++ mklink(m0, str), str0 ∈ entries2
Used simplifier rules: ⊦ mkdir(m, md, m0, m1, entries).entries = entries; (s)%⊦ p_ino ∈ dirs ∧ dirs[p_ino] = mkdir(m, md, n, n0, entries) ∧ str ∈ entries → links(entries[str], dirs) ≠ ∅; (s)% ⊦ ls -- alink = ∅ ↔ ls = ∅ ∨ ls = ∅ ++ alink; (ws)%size-zero: ⊦ # ls ≠ 0 → ls ≠ ∅; (forward) from specification set-basic[alink-set]% ⊦ mklink(m, str).name = str; (s)% ⊦ mklink(m, str).pino = m; (s)%⊦ alink ∈ links(ino, dirs) ↔ alink.pino ∈ dirs ∧ alink.name ∈ dirs[alink.pino].entries ∧ ino = dirs[alink.pino].entries[alink.name]; (s)% ⊦ alink ∈ ls -- alink0 ↔ alink ≠ alink0 ∧ alink ∈ ls; (s)% ⊦ m + 1 ≠ 0; (s)%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ m + n = 1 ↔ m = 0 ∧ n = 1 ∨ n = 0 ∧ m = 1; (ws)% ⊦ ¬ alink ∈ ls → #(ls ++ alink) = # ls + 1; (s)