| afs-cons(dirs, files) ⊦ afs-cons(dirs \ orphans(dirs, files), files \ orphans(dirs, files)) |
⊦ afs-cons(dirs, files) ↔ (∀ ino. ROOT_INO ∈ dirs ∧ (ino ∈ dirs ∧ ino ≠ ROOT_INO ∧ links(ino, dirs) = ∅ → dir-empty(ino, dirs, files)) ∧ ( ino ∈ dirs → ¬ ino ∈ files ∧ dirs[ino].nlink = # links(ino, dirs) ∧ dirs[ino].nlink ≤ 1 ∧ dirs[ino].size = # dirs[ino].entries ∧ dirs[ino].nsubdirs = # subdirs(ino, dirs)) ∧ (ino ∈ files → ¬ ino ∈ dirs ∧ files[ino].nlink = # links(ino, dirs)) ∧ (∀ name. ino ∈ dirs ∧ name ∈ dirs[ino].entries → valid-ino(dirs[ino].entries[name], dirs, files)) ∧ (∀ n. ino ∈ files ∧ n ∈ files[ino].content → valid-pagesize(ino, n, files)))
afs-cons(dirs, files) ⊦ ∀ ino. ROOT_INO ∈ dirs \ orphans(dirs, files) ∧ ( ino ∈ dirs \ orphans(dirs, files) ∧ ino ≠ ROOT_INO ∧ links(ino, dirs \ orphans(dirs, files)) = ∅ → dir-empty(ino, dirs \ orphans(dirs, files), files \ orphans(dirs, files))) ∧ ( ino ∈ dirs \ orphans(dirs, files) → ¬ ino ∈ files \ orphans(dirs, files) ∧ (dirs \ orphans(dirs, files))[ino].nlink = # links(ino, dirs \ orphans(dirs, files)) ∧ (dirs \ orphans(dirs, files))[ino].nlink ≤ 1 ∧ (dirs \ orphans(dirs, files))[ino].size = # (dirs \ orphans(dirs, files))[ino].entries ∧ (dirs \ orphans(dirs, files))[ino].nsubdirs = # subdirs(ino, dirs \ orphans(dirs, files))) ∧ ( ino ∈ files \ orphans(dirs, files) → ¬ ino ∈ dirs \ orphans(dirs, files) ∧ (files \ orphans(dirs, files))[ino].nlink = # links(ino, dirs \ orphans(dirs, files))) ∧ (∀ name. ino ∈ dirs \ orphans(dirs, files) ∧ name ∈ (dirs \ orphans(dirs, files))[ino].entries → valid-ino((dirs \ orphans(dirs, files))[ino].entries[name], dirs \ orphans(dirs, files), files \ orphans(dirs, files))) ∧ (∀ n. ino ∈ files \ orphans(dirs, files) ∧ n ∈ (files \ orphans(dirs, files))[ino].content → valid-pagesize(ino, n, files \ orphans(dirs, files)))
Used terms: files \ orphans(dirs, files), dirs \ orphans(dirs, files)