| fs0 = fs, log0 = log, fo.inodes?, ro.inodes?, log-cons(log, fs), ri-cons(ri, fs), ri-inj(fi), ri-inj(ri) ⊦ ∃ kx, ax. (¬ dups(kx) ∧ ¬ dups(ax) ∧ new(ax, fs) ∧ kx.toSet ⊆ dom ri ∧ # kx = # ax ∧ ax.toSet ∩ log.toSet = ∅) ∧ ⟨fs[ax] := fs[ri[kx]], log := log + ax; ri[kx] := ax; aubifs_core_gc_drop#(ri, log; fs); boolvar := ?⟩ (boolvar ∧ fs0 = fs ∧ log0 = log) |
ro.inodes?, fo.inodes?, log-cons(log, fs), ri-cons(ri, fs), ri-inj(ri), ri-inj(fi) ⊦ ∃ kx, ax. ¬ dups(kx) ∧ ¬ dups(ax) ∧ new(ax, fs) ∧ kx.toSet ⊆ dom ri ∧ # kx = # ax ∧ ax.toSet ∩ log.toSet = ∅ ∧ ⟨fs1 := fs[ax, fs[ri[kx]]], log1 := log + ax; ri[kx] := ax; aubifs_core_gc_drop#(ri, log1; fs1); boolvar := ?⟩ (boolvar ∧ fs = fs1 ∧ log = log1)