| boolvar ↔ true, fo.inodes?, ro.inodes?, key-cons(key, fs[adr]), log-cons(log, fs), ri-inj(fi), ri-inj(ri), adr ∈ fs ⊦ ⟨if ¬ adr ∈ ri ∧ adr ∈ fs ∧ key-cons(key, fs[adr]) then ri[key] := adr else abort⟩ true, adr ∈ ri |
boolvar ↔ true, ro.inodes?, fo.inodes?, key-cons(key, fs[adr]), log-cons(log, fs), ri-inj(ri), ri-inj(fi), adr ∈ fs ⊦ ⟨ri[key] := adr⟩ true, adr ∈ ri