| asynced0 ↔ asynced, old_ino = LEB_SIZE ⊦ ⟪dirs := ?, files := ?, asynced := ?; fail#(; ; err)⟫ (err = ESUCCESS → asynced ∧ afs-cons(dirs, files)) |
asynced0 ↔ asynced1, old_ino = LEB_SIZE ⊦ ⟪fail#(; ; err)⟫ (err = ESUCCESS → asynced ∧ afs-cons(dirs, files))