| key0 ∈ ri, key ∈ ro, key0 ∈ ri \ datakeys(key, n, ri), key0.data? → ¬ inodekey(key0.ino) ∈ ro, ¬ key0.data? ∨ ¬ key.inode? ∨ key0.ino ≠ key.ino ∨ ¬ n ≤ key0.part * VFS_PAGE_SIZE ⊦ # ro = 0, (ri \ datakeys(key, n, ri))[key0] = (ri ⊖ ro)[key0], ro = ∅, key0.data?, key0 ∈ ro |
key ∈ ro, key0 ∈ ri ⊦ # ro = 0, (ri \ datakeys(key, n, ri))[key0] = ri[key0], ro = ∅, key0.data?, key0 ∈ ro
Used simplifier rules: ⊦ key ∈ datakeys(key0, ri) ↔ key ∈ ri ∧ key.data? ∧ key0.inode? ∧ key.ino = key0.ino; (s)%⊦ key ∈ datakeys(key0, n, ri) ↔ key ∈ datakeys(key0, ri) ∧ n ≤ key.part * VFS_PAGE_SIZE; (s)% ⊦ key ∈ ri \ ks ↔ key ∈ ri ∧ ¬ key ∈ ks; (ws)% ⊦ key ∈ ri ∧ ¬ key ∈ ks ∧ ¬ key.data? → (ri ⊖ ks)[key] = ri[key]; (s)