| dirs0[m1] = mkdir(m0, md2, # links(m1, dirs0), m4, entries1), afs-cons(dirs0, files0), afs-cons(dirs0[m1, mkdir(m0 + 1, md1, # links(m1, dirs0), m4, entries1[str, ino0])], (files0 ++ ino0)[ino0, mkfile(0, md, 1, ∅)]), icache-cons(icache0, dirs0, files0), synced(dirs0, icache0, pcache), m1 ∈ dirs0, asynced1 → synced(files0, icache0, pcache), links(m1, dirs0) ≠ ∅ ∨ m1 = ROOT_INO ⊦ ino0 = 0, ino0 ∈ dirs0, ino0 ∈ files0, str ∈ entries1, ∀ ino. ino ∈ icache0[m1, mkientry(false, mkinode(m1, md1, true, # links(m1, dirs0), m4, m0 + 1))] [ino0, mkientry(false, mkinode(ino0, md, false, 1, 0, 0)) ] → icache0[m1, mkientry(false, mkinode(m1, md1, true, # links(m1, dirs0), m4, m0 + 1))] [ino0, mkientry(false, mkinode(ino0, md, false, 1, 0, 0)) ] [ino ] .inode .ino = ino ∧ (icache0[m1, mkientry(false, mkinode(m1, md1, true, # links(m1, dirs0), m4, m0 + 1))] [ino0, mkientry(false, mkinode(ino0, md, false, 1, 0, 0)) ] [ino ] .dirty ⊃ valid-file-inode (icache0[m1, mkientry(false, mkinode(m1, md1, true, # links(m1, dirs0), m4, m0 + 1))] [ino0, mkientry(false, mkinode(ino0, md, false, 1, 0, 0)) ] [ino ] .inode, dirs0[m1, mkdir(m0 + 1, md1, # links(m1, dirs0), m4, entries1[str, ino0])], (files0 ++ ino0)[ino0, mkfile(0, md, 1, ∅)]) ; valid-ino(ino, dirs0[m1, mkdir(m0 + 1, md1, # links(m1, dirs0), m4, entries1[str, ino0])], (files0 ++ ino0)[ino0, mkfile(0, md, 1, ∅)]) ∧ valid-inode (icache0[m1, mkientry(false, mkinode(m1, md1, true, # links(m1, dirs0), m4, m0 + 1))] [ino0, mkientry(false, mkinode(ino0, md, false, 1, 0, 0)) ] [ino ] .inode, dirs0[m1, mkdir(m0 + 1, md1, # links(m1, dirs0), m4, entries1[str, ino0])], (files0 ++ ino0)[ino0, mkfile(0, md, 1, ∅)]) ) |
dirs0[m1] = mkdir(m0, md2, # links(m1, dirs0), m4, entries1), afs-cons(dirs0[m1, mkdir(m0 + 1, md1, # links(m1, dirs0), m4, entries1[str, ino0])], (files0 ++ ino0)[ino0, mkfile(0, md, 1, ∅)]), afs-cons(dirs0, files0), icache-cons(icache0, dirs0, files0), synced(dirs0, icache0, pcache), ino ∈ icache0[m1, mkientry(false, mkinode(m1, md1, true, # links(m1, dirs0), m4, m0 + 1))][ino0, mkientry(false, mkinode(ino0, md, false, 1, 0, 0))], m1 ∈ dirs0, asynced1 → synced(files0, icache0, pcache), links(m1, dirs0) ≠ ∅ ∨ m1 = ROOT_INO ⊦ ino0 = 0, str ∈ entries1, ino0 ∈ files0, ino0 ∈ dirs0, icache0[m1, mkientry(false, mkinode(m1, md1, true, # links(m1, dirs0), m4, m0 + 1))] [ino0, mkientry(false, mkinode(ino0, md, false, 1, 0, 0)) ] [ino ] .inode .ino = ino ∧ (icache0[m1, mkientry(false, mkinode(m1, md1, true, # links(m1, dirs0), m4, m0 + 1))] [ino0, mkientry(false, mkinode(ino0, md, false, 1, 0, 0)) ] [ino ] .dirty ⊃ ( icache0[m1, mkientry(false, mkinode(m1, md1, true, # links(m1, dirs0), m4, m0 + 1))] [ino0, mkientry(false, mkinode(ino0, md, false, 1, 0, 0)) ] [ino ] .inode .ino = ino0 ∨ icache0[m1, mkientry(false, mkinode(m1, md1, true, # links(m1, dirs0), m4, m0 + 1))] [ino0, mkientry(false, mkinode(ino0, md, false, 1, 0, 0)) ] [ino ] .inode .ino ∈ files0) ∧ icache0[m1, mkientry(false, mkinode(m1, md1, true, # links(m1, dirs0), m4, m0 + 1))] [ino0, mkientry(false, mkinode(ino0, md, false, 1, 0, 0)) ] [ino ] .inode .nlink = ( icache0[m1, mkientry(false, mkinode(m1, md1, true, # links(m1, dirs0), m4, m0 + 1))] [ino0, mkientry(false, mkinode(ino0, md, false, 1, 0, 0)) ] [ino ] .inode .ino = ino0 ⊃ mkfile(0, md, 1, ∅) ;(files0 ++ ino0 )[icache0[m1, mkientry(false, mkinode(m1, md1, true, # links(m1, dirs0), m4, m0 + 1))] [ino0, mkientry(false, mkinode(ino0, md, false, 1, 0, 0)) ] [ino ] .inode .ino ] ) .nlink ∧ icache0[m1, mkientry(false, mkinode(m1, md1, true, # links(m1, dirs0), m4, m0 + 1))] [ino0, mkientry(false, mkinode(ino0, md, false, 1, 0, 0)) ] [ino ] .inode .nsubdirs = 0 ∧ ¬ icache0[m1, mkientry(false, mkinode(m1, md1, true, # links(m1, dirs0), m4, m0 + 1))] [ino0, mkientry(false, mkinode(ino0, md, false, 1, 0, 0)) ] [ino ] .inode .directory ; (ino ∈ dirs0 ∨ ino = ino0 ∨ ino ∈ files0) ∧ icache0[m1, mkientry(false, mkinode(m1, md1, true, # links(m1, dirs0), m4, m0 + 1))] [ino0, mkientry(false, mkinode(ino0, md, false, 1, 0, 0)) ] [ino ] .inode = ( icache0[m1, mkientry(false, mkinode(m1, md1, true, # links(m1, dirs0), m4, m0 + 1))] [ino0, mkientry(false, mkinode(ino0, md, false, 1, 0, 0)) ] [ino ] .inode .ino ∈ dirs0 ⊃ mkinode (icache0[m1, mkientry(false, mkinode(m1, md1, true, # links(m1, dirs0), m4, m0 + 1))] [ino0, mkientry(false, mkinode(ino0, md, false, 1, 0, 0)) ] [ino ] .inode .ino, ( icache0[m1, mkientry(false, mkinode(m1, md1, true, # links(m1, dirs0), m4, m0 + 1))] [ino0, mkientry(false, mkinode(ino0, md, false, 1, 0, 0)) ] [ino ] .inode .ino = m1 ⊃ mkdir(m0 + 1, md1, # links(m1, dirs0), m4, entries1[str, ino0]) ;dirs0 [icache0[m1, mkientry(false, mkinode(m1, md1, true, # links(m1, dirs0), m4, m0 + 1))] [ino0, mkientry(false, mkinode(ino0, md, false, 1, 0, 0)) ] [ino ] .inode .ino ] ) .meta, true, ( icache0[m1, mkientry(false, mkinode(m1, md1, true, # links(m1, dirs0), m4, m0 + 1))] [ino0, mkientry(false, mkinode(ino0, md, false, 1, 0, 0)) ] [ino ] .inode .ino = m1 ⊃ mkdir(m0 + 1, md1, # links(m1, dirs0), m4, entries1[str, ino0]) ;dirs0 [icache0[m1, mkientry(false, mkinode(m1, md1, true, # links(m1, dirs0), m4, m0 + 1))] [ino0, mkientry(false, mkinode(ino0, md, false, 1, 0, 0)) ] [ino ] .inode .ino ] ) .nlink, ( icache0[m1, mkientry(false, mkinode(m1, md1, true, # links(m1, dirs0), m4, m0 + 1))] [ino0, mkientry(false, mkinode(ino0, md, false, 1, 0, 0)) ] [ino ] .inode .ino = m1 ⊃ mkdir(m0 + 1, md1, # links(m1, dirs0), m4, entries1[str, ino0]) ;dirs0 [icache0[m1, mkientry(false, mkinode(m1, md1, true, # links(m1, dirs0), m4, m0 + 1))] [ino0, mkientry(false, mkinode(ino0, md, false, 1, 0, 0)) ] [ino ] .inode .ino ] ) .nsubdirs, ( icache0[m1, mkientry(false, mkinode(m1, md1, true, # links(m1, dirs0), m4, m0 + 1))] [ino0, mkientry(false, mkinode(ino0, md, false, 1, 0, 0)) ] [ino ] .inode .ino = m1 ⊃ mkdir(m0 + 1, md1, # links(m1, dirs0), m4, entries1[str, ino0]) ;dirs0 [icache0[m1, mkientry(false, mkinode(m1, md1, true, # links(m1, dirs0), m4, m0 + 1))] [ino0, mkientry(false, mkinode(ino0, md, false, 1, 0, 0)) ] [ino ] .inode .ino ] ) .size) ;mkinode (icache0[m1, mkientry(false, mkinode(m1, md1, true, # links(m1, dirs0), m4, m0 + 1))] [ino0, mkientry(false, mkinode(ino0, md, false, 1, 0, 0)) ] [ino ] .inode .ino, ( icache0[m1, mkientry(false, mkinode(m1, md1, true, # links(m1, dirs0), m4, m0 + 1))] [ino0, mkientry(false, mkinode(ino0, md, false, 1, 0, 0)) ] [ino ] .inode .ino = ino0 ⊃ mkfile(0, md, 1, ∅) ;(files0 ++ ino0 )[icache0[m1, mkientry(false, mkinode(m1, md1, true, # links(m1, dirs0), m4, m0 + 1))] [ino0, mkientry(false, mkinode(ino0, md, false, 1, 0, 0)) ] [ino ] .inode .ino ] ) .meta, false, ( icache0[m1, mkientry(false, mkinode(m1, md1, true, # links(m1, dirs0), m4, m0 + 1))] [ino0, mkientry(false, mkinode(ino0, md, false, 1, 0, 0)) ] [ino ] .inode .ino = ino0 ⊃ mkfile(0, md, 1, ∅) ;(files0 ++ ino0 )[icache0[m1, mkientry(false, mkinode(m1, md1, true, # links(m1, dirs0), m4, m0 + 1))] [ino0, mkientry(false, mkinode(ino0, md, false, 1, 0, 0)) ] [ino ] .inode .ino ] ) .nlink, 0, ( icache0[m1, mkientry(false, mkinode(m1, md1, true, # links(m1, dirs0), m4, m0 + 1))] [ino0, mkientry(false, mkinode(ino0, md, false, 1, 0, 0)) ] [ino ] .inode .ino = ino0 ⊃ mkfile(0, md, 1, ∅) ;(files0 ++ ino0 )[icache0[m1, mkientry(false, mkinode(m1, md1, true, # links(m1, dirs0), m4, m0 + 1))] [ino0, mkientry(false, mkinode(ino0, md, false, 1, 0, 0)) ] [ino ] .inode .ino ] ) .size) ) )
Used simplifier rules: ⊦ dirs[ino, ad][ino0] = (ino0 = ino ∧ ino ∈ dirs ⊃ ad;dirs[ino0]); (s)%⊦ getinode(ino, dirs, files) = (ino ∈ dirs ⊃ mkinode (ino, dirs[ino].meta, true, dirs[ino].nlink, dirs[ino].nsubdirs, dirs[ino].size) ;mkinode (ino, files[ino].meta, false, files[ino].nlink, 0, files[ino].size) ); (s)%⊦ valid-inode(inode, dirs, files) ↔ inode = getinode(inode.ino, dirs, files); (s)% ⊦ ino ∈ dirs[ino0, ad] ↔ ino ∈ dirs; (s)% ⊦ valid-ino(ino, dirs, files) ↔ ino ∈ dirs ∨ ino ∈ files; (s)% ⊦ files[ino, af][ino0] = (ino0 = ino ∧ ino ∈ files ⊃ af;files[ino0]); (s)%ino ≠ 0, ¬ ino ∈ files ⊦ ino0 ∈ files ++ ino ↔ ino0 = ino ∨ ino0 ∈ files; (s)% ⊦ ino ∈ files[ino0, af] ↔ ino ∈ files; (s)% ⊦ valid-file-ino(ino, dirs, files) ↔ ino ∈ files; (s)%⊦ valid-file-inode(inode, dirs, files) ↔ valid-file-ino(inode.ino, dirs, files) ∧ inode.nlink = files[inode.ino].nlink ∧ inode.nsubdirs = 0 ∧ ¬ inode.directory; (s)