| ((btree(rp, null, adr, height, dirty0, ri, iast, as, alladrs, nstat) * true))(zh0), as ⊆ dom iast, as ⊆ alladrs ⊦ ((btree(rp, null, adr, height, dirty0, ri, iast, as, alladrs, nstat) * true))(zh1) |
⊦ ((btree(rp, r0, adr, height, dirty0, ri, iast, as, alladrs, nstat) * P))(zh0) ↔ (∃ r, zh, zbrar, dirty, nused. (r0 = null ⊃ ¬ dirty ∧ P(zh0);r = r0 ∧ zh = zh0) ∧ (dirty → dirty0) ∧ (adr ∈ as ↔ ¬ dirty) ∧ adr ∈ alladrs ∧ nsize(nused, nstat) ∧ unmodified(adr, mkznode(rp, zbrar, height = 0, dirty, nused), iast) ∧ (( r => mkznode(rp, zbrar, height = 0, dirty, nused) * bnode(r, zbrar, 0, nused, nused, height, dirty, ri, iast, as -- adr, alladrs -- adr) * P) )(zh))
as ⊆ alladrs, as ⊆ dom iast, ∃ r, zh, zbrar, dirty, nused. (null = null ⊃ ¬ dirty ∧ true(zh0);r = null ∧ zh = zh0) ∧ (dirty → dirty0) ∧ (adr ∈ as ↔ ¬ dirty) ∧ adr ∈ alladrs ∧ nsize(nused, nstat) ∧ unmodified(adr, mkznode(rp, zbrar, height = 0, dirty, nused), iast) ∧ (( r => mkznode(rp, zbrar, height = 0, dirty, nused) * bnode(r, zbrar, 0, nused, nused, height, dirty, ri, iast, as -- adr, alladrs -- adr) * true) )(zh) ⊦ ((btree(rp, null, adr, height, dirty0, ri, iast, as, alladrs, nstat) * true))(zh1)
Used terms: zh0, true, nstat, alladrs, as, iast, ri, dirty0, height, adr, null, rp