| # ax0 = # kx1, # ax0 = # fs[ri[kx1]], ro.inodes?, new(ax0, fs), orphans-cons(fs, ri, ro), ri-closed(ri, fs, ro), ri-cons(ri, fs), key ∈ ri, kx1.toSet ⊆ dom ri, ∀ kx0, ro0, fs0, ri0. # kx1 = # kx0 ∧ ro0.inodes? ∧ new(ax0, fs0) ∧ orphans-cons(fs0, ri0, ro0) ∧ ri-closed(ri0, fs0, ro0) ∧ ri-cons(ri0, fs0) ∧ kx0.toSet ⊆ dom ri0 → dups(kx0) ∨ replay-safe(ax0, fs0[ax0, fs0[ri0[kx0]]], ri0 ⊖ ro0) ⊦ dups(kx1), dups(ax0), key ∈ kx1, adr ∈ fs, adr ∈ ax0, ¬ adr ∈ ri ⊖ ro ∧ node-cons(fs[adr, fs[ri[key]]][adr].key, fs[adr, fs[ri[key]]][adr]) ∧ replay-safe(ax0, fs[adr, fs[ri[key]]][ax0, fs[ri[kx1]]], replay-one(adr, fs[adr, fs[ri[key]]][adr], ri ⊖ ro)) |
# ax0 = # kx1, ro.inodes?, new(ax0, fs), orphans-cons(fs, ri, ro), ri-closed(ri, fs, ro), ri-cons(ri, fs), key ∈ ri, kx1.toSet ⊆ dom ri, ∀ kx0, ro0, fs0, ri0. # kx1 = # kx0 ∧ ro0.inodes? ∧ new(ax0, fs0) ∧ orphans-cons(fs0, ri0, ro0) ∧ ri-closed(ri0, fs0, ro0) ∧ ri-cons(ri0, fs0) ∧ kx0.toSet ⊆ dom ri0 → dups(kx0) ∨ replay-safe(ax0, fs0[ax0, fs0[ri0[kx0]]], ri0 ⊖ ro0) ⊦ dups(ax0), dups(kx1), adr ∈ ax0, adr ∈ fs, key ∈ kx1, ¬ adr ∈ ri ⊖ ro ∧ node-cons(key, fs[ri[key]]) ∧ replay-safe(ax0, fs[adr, fs[ri[key]]][ax0, fs[ri[kx1]]], replay-one(adr, fs[ri[key]], ri ⊖ ro))
Used simplifier rules: ⊦ ri-cons(ri, fs) ∧ key ∈ ri → fs[ri[key]].key = key; (s)% ⊦ fs[adr, nd][adr] = nd; (s)% ⊦ # ri[kx] = # kx; (s)% ⊦ # fs[ax] = # ax; (s)