| ⟪aubifs_replayone#(adr, fi, ro, fo, fs, log, boolvar; err, ri)⟫ ((err = ESUCCESS ∨ ⌊err⌋ ) ∧ (err = ESUCCESS → ri = replay-one(adr, fs[adr], replay-log(ax, fs, ri1)))), err = ESUCCESS, ri = replay-log(ax, fs, ri1), node-cons(fs[adr].key, fs[adr]), replay-safe(ax + adr ' + ax0, fs, ri1), replay-safe(ax0, fs, replay-one(adr, fs[adr], replay-log(ax, fs, ri1))), adr ∈ fs ⊦ ⟪aubifs_replayone#(adr, fi, ro, fo, fs, log, boolvar; err, ri); ax2 := ax0⟫ ( (err = ESUCCESS ∨ ⌊err⌋ ) ∧ (err = ESUCCESS → (∃ ax1. ax + adr ' + ax0 = ax1 + ax2 ∧ replay-safe(ax2, fs, replay-log(ax1, fs, ri1)) ∧ ri = replay-log(ax1, fs, ri1))) ∧ ¬ # ax0 < # ax2), adr ∈ replay-log(ax, fs, ri1) |
⟨aubifs_replayone#(adr, fi, ro, fo, fs, log, boolvar; err, ri)⟩ (err = err0 ∧ ri = ri0), ⟪aubifs_replayone#(adr, fi, ro, fo, fs, log, boolvar; err, ri)⟫ ((err = ESUCCESS ∨ ⌊err⌋ ) ∧ (err = ESUCCESS → ri = replay-one(adr, fs[adr], replay-log(ax, fs, ri1)))), err = ESUCCESS, ri = replay-log(ax, fs, ri1), node-cons(fs[adr].key, fs[adr]), replay-safe(ax0, fs, replay-one(adr, fs[adr], replay-log(ax, fs, ri1))), replay-safe(ax + adr ' + ax0, fs, ri1), adr ∈ fs, err0 = ESUCCESS → ri0 = replay-one(adr, fs[adr], replay-log(ax, fs, ri1)), err0 = ESUCCESS ∨ ⌊err0⌋ ⊦ ⟪ax2 := ax0⟫ ( (err0 = ESUCCESS ∨ ⌊err0⌋ ) ∧ (err0 = ESUCCESS → (∃ ax1. ax + adr ' + ax0 = ax1 + ax2 ∧ replay-safe(ax2, fs, replay-log(ax1, fs, ri1)) ∧ ri0 = replay-log(ax1, fs, ri1))) ∧ ¬ # ax0 < # ax2), adr ∈ replay-log(ax, fs, ri1)