| log-cons(log, fs), replay-safe(log, fs, fi ⊖ fo) ⊦ key ∈ ri ⊖ (ro ++ inodekey(ino)) ↔ key ∈ (ri ⊖ inodekey(ino)) ⊖ ro |
⊦ key ∈ ri ⊖ ks ↔ key ∈ ri ∧ ¬ key ∈ ks ∧ (key.data? → ¬ inodekey(key.ino) ∈ ks)
log-cons(log, fs), replay-safe(log, fs, fi ⊖ fo) ⊦ key ∈ ri ⊖ (ro ++ inodekey(ino)) ↔ key ∈ ri ⊖ inodekey(ino) ∧ ¬ key ∈ ro ∧ (key.data? → ¬ inodekey(key.ino) ∈ ro)
Used terms: ro, ri ⊖ inodekey(ino), key