| ((btree(rp, rp0, adr0, 0, dirty, fi, iast, as, alladrs, nstat) * P))(zh) ⊦ as ⊆ dom iast |
⊦ ((btree(rp, r0, adr, height, dirty0, ri, iast, as, alladrs, nstat) * P))(zh0) ↔ (∃ r, zh, zbrar, dirty, nused. (r0 = null ⊃ ¬ dirty ∧ P(zh0);r = r0 ∧ zh = zh0) ∧ (dirty → dirty0) ∧ (adr ∈ as ↔ ¬ dirty) ∧ adr ∈ alladrs ∧ nsize(nused, nstat) ∧ unmodified(adr, mkznode(rp, zbrar, height = 0, dirty, nused), iast) ∧ (( r => mkznode(rp, zbrar, height = 0, dirty, nused) * bnode(r, zbrar, 0, nused, nused, height, dirty, ri, iast, as -- adr, alladrs -- adr) * P) )(zh))
∃ r, zh1, zbrar, dirty1, nused. (rp0 = null ⊃ ¬ dirty1 ∧ P(zh);r = rp0 ∧ zh1 = zh) ∧ (dirty1 → dirty) ∧ (adr0 ∈ as ↔ ¬ dirty1) ∧ adr0 ∈ alladrs ∧ nsize(nused, nstat) ∧ unmodified(adr0, mkznode(rp, zbrar, 0 = 0, dirty1, nused), iast) ∧ ((r => mkznode(rp, zbrar, 0 = 0, dirty1, nused) * bnode(r, zbrar, 0, nused, nused, 0, dirty1, fi, iast, as -- adr0, alladrs -- adr0) * P))(zh1) ⊦ as ⊆ dom iast
Used terms: zh, P, nstat, alladrs, as, iast, fi, dirty, 0, adr0, rp0, rp