| adr = adr2, fo.inodes?, ro.inodes?, log-cons(log, fs), node-cons(nd1.key, nd1), node-cons(nd2.key, nd2), ri-cons(ri, fs), ri-inj(fi), ri-inj(ri) ⊦ adr1 = adr2, adr1 ∈ fs, adr2 ∈ fs, (adr ∈ fs ∧ node-cons(fs[adr].key, fs[adr]) → adr ∈ log → node-cons(fs[adr1, nd2][adr2, nd1][adr].key, fs[adr1, nd2][adr2, nd1][adr])) ∧ (ri[key] ∈ fs ∧ key-cons(key, fs[ri[key]]) → key ∈ ri → key-cons(key, fs[adr1, nd2][adr2, nd1][ri[key]])) |
ro.inodes?, fo.inodes?, key-cons(key, fs[ri[key]]), log-cons(log, fs), node-cons(nd2.key, nd2), node-cons(nd1.key, nd1), ri-cons(ri, fs), ri-inj(ri), ri-inj(fi), key ∈ ri, ri[key] ∈ fs ⊦ adr1 = adr2, key-cons(key, fs[adr1, nd2][adr2, nd1][ri[key]]), adr2 ∈ fs, adr1 ∈ fs