| fo.inodes?, ro.inodes?, key-cons(key, fs[adr]), log-cons(log, fs), ri-inj(fi), ri-inj(ri), adr ∈ fs ⊦ ⟪if ¬ adr ∈ ri ∧ adr ∈ fs ∧ key-cons(key, fs[adr]) then ri[key] := adr else abort⟫ ri-inj(ri), adr ∈ ri |
ro.inodes?, fo.inodes?, key-cons(key, fs[adr]), log-cons(log, fs), ri-inj(ri), ri-inj(fi), adr ∈ fs ⊦ ⟪ri[key] := adr⟫ ri-inj(ri), adr ∈ ri