| #(adr + ax0) = # kx, ro.inodes?, new(adr + ax0, fs), orphans-cons(fs, ri, ro), ri-closed(ri, fs, ro), ri-cons(ri, fs), kx.toSet ⊆ dom ri, ∀ kx, ro, fs, ri. # ax0 = # kx ∧ ro.inodes? ∧ new(ax0, fs) ∧ orphans-cons(fs, ri, ro) ∧ ri-closed(ri, fs, ro) ∧ ri-cons(ri, fs) ∧ kx.toSet ⊆ dom ri → replay-log(ax0, fs[ax0, fs[ri[kx]]], ri ⊖ ro) = ri[kx, ax0] ⊖ ro ∨ dups(ax0) ∨ dups(kx) ⊦ replay-log(adr + ax0, fs[adr + ax0, fs[ri[kx]]], ri ⊖ ro) = ri[kx, adr + ax0] ⊖ ro, dups(kx), dups(adr + ax0) |
# ax0 + 1 = # kx, ro.inodes?, new(ax0, fs), orphans-cons(fs, ri, ro), ri-closed(ri, fs, ro), ri-cons(ri, fs), kx.toSet ⊆ dom ri, ∀ kx0, ro0, fs0, ri0. # ax0 = # kx0 ∧ ro0.inodes? ∧ new(ax0, fs0) ∧ orphans-cons(fs0, ri0, ro0) ∧ ri-closed(ri0, fs0, ro0) ∧ ri-cons(ri0, fs0) ∧ kx0.toSet ⊆ dom ri0 → replay-log(ax0, fs0[ax0, fs0[ri0[kx0]]], ri0 ⊖ ro0) = ri0[kx0, ax0] ⊖ ro0 ∨ dups(kx0) ⊦ replay-log(ax0, fs[adr ' + ax0, fs[ri[kx]]], replay-one(adr, fs[adr ' + ax0, fs[ri[kx]]][adr], ri ⊖ ro)) = ri[kx, adr ' + ax0] ⊖ ro, dups(kx), dups(ax0), adr ∈ fs, adr ∈ ax0
Used simplifier rules: replay-log-rec: ⊦ replay-log(adr ' + log, fs, ri) = replay-log(log, fs, replay-one(adr, fs[adr], ri));% ⊦ dups(adr ' + ax) ↔ dups(ax) ∨ adr ∈ ax; (ws)% ⊦ new(adr ' + log, fs) ↔ ¬ adr ∈ fs ∧ new(log, fs); (s)%a: ⊦ (ax + ax0) + ax1 = ax + ax0 + ax1; from specification list[address-list-set]% ⊦ m +1 = m + 1; (s)% ⊦ #(adr ' + ax) = (# ax)+1; (s)% ⊦ adr + ax = adr ' + ax; (s)