| ((btree(rp, r, adr, height, false, ri, iast, alladrs, alladrs, ok) * P))(zh), alladrs ⊆ dom iast ⊦ ((btree(rp, null, adr, height, false, ri, iast, alladrs, alladrs, ok) * true * P))(zh) |
⊦ ((btree(rp, r0, adr, height, dirty0, ri, iast, as, alladrs, nstat) * P))(zh0) ↔ (∃ r, zh, zbrar, dirty, nused. (r0 = null ⊃ ¬ dirty ∧ P(zh0);r = r0 ∧ zh = zh0) ∧ (dirty → dirty0) ∧ (adr ∈ as ↔ ¬ dirty) ∧ adr ∈ alladrs ∧ nsize(nused, nstat) ∧ unmodified(adr, mkznode(rp, zbrar, height = 0, dirty, nused), iast) ∧ (( r => mkznode(rp, zbrar, height = 0, dirty, nused) * bnode(r, zbrar, 0, nused, nused, height, dirty, ri, iast, as -- adr, alladrs -- adr) * P) )(zh))
alladrs ⊆ dom iast, ∃ r1, zh1, zbrar, dirty, nused. (r = null ⊃ ¬ dirty ∧ P(zh);r1 = r ∧ zh1 = zh) ∧ (dirty → false) ∧ (adr ∈ alladrs ↔ ¬ dirty) ∧ adr ∈ alladrs ∧ nsize(nused, ok) ∧ unmodified(adr, mkznode(rp, zbrar, height = 0, dirty, nused), iast) ∧ (( r1 => mkznode(rp, zbrar, height = 0, dirty, nused) * bnode(r1, zbrar, 0, nused, nused, height, dirty, ri, iast, alladrs -- adr, alladrs -- adr) * P) )(zh1) ⊦ ((btree(rp, null, adr, height, false, ri, iast, alladrs, alladrs, ok) * true * P))(zh)
Used terms: zh, P, ok, alladrs, alladrs, iast, ri, false, height, adr, r, rp