| # entries = m + 1, tree[p] = dnode(md, sdt), ((abs|(tree, ROOT_INO, p, ino0) * ino0 => mkdir(m, md, m0, m1, entries -- str) * abs(sdt -- str, entries -- str) * D))(dirs), p ∈ tree, str ∈ entries, p ∈ tree[p, dnode(md, sdt -- str)] ⊦ entries = ∅, ((_∃(λ ino1. abs|(tree[p, dnode(md, sdt -- str)], ROOT_INO, p, ino1) * abs(tree[p, dnode(md, sdt -- str)][p], ino1)) * D))(dirs) |
# entries = m + 1, tree[p] = dnode(md, sdt), ((abs|(tree, ROOT_INO, p, ino0) * ino0 => mkdir(m, md, m0, m1, entries -- str) * abs(sdt -- str, entries -- str) * D))(dirs), str ∈ entries, p ∈ tree ⊦ entries = ∅, ∃ ino. (((abs|(tree[p, dnode(md, sdt -- str)], ROOT_INO, p, ino) * abs(dnode(md, sdt -- str), ino)) * D))(dirs)
Used simplifier rules: sep-com: ⊦ D * D0 = D0 * D; from specification heap-sep[dir-heap]%sep-ass: ⊦ (D * D0) * D1 = D * D0 * D1; from specification heap-sep[dir-heap]% ⊦ ((_∃ nD * D))(dirs) ↔ (∃ ino. ((nD(ino) * D))(dirs)); (s)% ⊦ p ∈ tree → tree[p, tree0][p] = tree0; (s)% ⊦ p ∈ tree → p ∈ tree[p, tree0]; (s)