This is a listing of all goals defined over the current specification. Axioms are marked yellow, proved theorems green and unproved theorems blue. Click on individual names to get more information on the proof.
| Name: | Sequent: | Type: |
|---|---|---|
| format | icache_format#(; ; ICACHE, ERR){ICACHE := ∅; ERR := ESUCCESS} | An Axiom |
| recovery | icache_recovery#(; ; ICACHE, ERR){ICACHE := ∅; ERR := ESUCCESS} | An Axiom |
| get | icache_get#(INO, ICACHE; HIT, INODE, ERR){if INO ∈ ICACHE then {INODE := ICACHE[INO].inode; HIT := true} else HIT := false; ERR := ESUCCESS} | An Axiom |
| set | icache_set#(INODE, DIRTY; ERR, ICACHE){ICACHE[INODE.ino] := mkientry(DIRTY, INODE)} | An Axiom |
| delete | icache_delete#(INO; ERR, ICACHE){ICACHE := ICACHE -- INO} | An Axiom |
| set-status | icache_set_status#(INO, DIRTY; ERR, ICACHE){if INO ∈ ICACHE then ICACHE[INO].dirty := DIRTY else ERR := EFAIL} | An Axiom |
| check-inode | icache_check_inode#(INO, ICACHE; HIT, DIRTY, ERR){if INO ∈ ICACHE then {HIT := true; DIRTY := ICACHE[INO].dirty} else HIT := false} | An Axiom |
| inv-recovery | ⊦ ⟪icache_recovery#(; ; icache, err)⟫ true | A Proof Obligation |
| crash-neutral-recovery | ⊦ ⟨icache_recovery#(; ; icache, err)⟩ true | A Proof Obligation |
| crash-neutral-delete | ⊦ ⟨icache_delete#(ino; err, icache)⟩ true | A Proof Obligation |
| crash-neutral-set-status | ⊦ ⟨icache_set_status#(ino, cache_sync; err, icache)⟩ true | A Proof Obligation |
| crash-neutral-check-inode | ⊦ ⟨icache_check_inode#(ino, icache; cache_sync, cache_sync0, err)⟩ true | A Proof Obligation |
| crash-neutral-set | ⊦ ⟨icache_set#(inode, cache_sync; err, icache)⟩ true | A Proof Obligation |
| crash-neutral-get | ⊦ ⟨icache_get#(ino, icache; cache_sync, inode, err)⟩ true | A Proof Obligation |