| ((btree(rp, rp0, adr, 0, dirty, ri, iast0, as, alladrs, nstat) * P))(zh), as ⊆ alladrs, as ⊆ dom iast0, iast0 | as ⊆ iast1 ⊦ ((btree(rp, rp0, adr, 0, dirty, ri, iast1, as, alladrs, nstat) * P))(zh) |
⊦ ((btree(rp, r0, adr, height, dirty0, ri, iast, as, alladrs, nstat) * P))(zh0) ↔ (∃ r, zh, zbrar, dirty, nused. (r0 = null ⊃ ¬ dirty ∧ P(zh0);r = r0 ∧ zh = zh0) ∧ (dirty → dirty0) ∧ (adr ∈ as ↔ ¬ dirty) ∧ adr ∈ alladrs ∧ nsize(nused, nstat) ∧ unmodified(adr, mkznode(rp, zbrar, height = 0, dirty, nused), iast) ∧ (( r => mkznode(rp, zbrar, height = 0, dirty, nused) * bnode(r, zbrar, 0, nused, nused, height, dirty, ri, iast, as -- adr, alladrs -- adr) * P) )(zh))
iast0 | as ⊆ iast1, as ⊆ dom iast0, as ⊆ alladrs, ∃ r, zh1, zbrar, dirty1, nused. (rp0 = null ⊃ ¬ dirty1 ∧ P(zh);r = rp0 ∧ zh1 = zh) ∧ (dirty1 → dirty) ∧ (adr ∈ as ↔ ¬ dirty1) ∧ adr ∈ alladrs ∧ nsize(nused, nstat) ∧ unmodified(adr, mkznode(rp, zbrar, 0 = 0, dirty1, nused), iast0) ∧ ((r => mkznode(rp, zbrar, 0 = 0, dirty1, nused) * bnode(r, zbrar, 0, nused, nused, 0, dirty1, ri, iast0, as -- adr, alladrs -- adr) * P))(zh1) ⊦ ((btree(rp, rp0, adr, 0, dirty, ri, iast1, as, alladrs, nstat) * P))(zh)
Used terms: zh, P, nstat, alladrs, as, iast0, ri, dirty, 0, adr, rp0, rp