| tree[p] = dnode(md, sdt), ((abs|(tree, ROOT_INO, p, ino) * ino => mkdir(# entries, md, # links(ino, dirs), m1, entries) * abs(sdt, entries)))(dirs), afs-cons(dirs, files), fids-cons(tree, abs-files(files), ofh), ispath(p, ROOT_INO, ino, dirs, files), p ∈ tree ⊦ ((abs|(tree, ROOT_INO, p, ino) * _∃(λ ad. ino => ad * abs(sdt, ad.entries) ∧ ⌜ad.meta = md⌝ ∧ ⌜ad.size = # ad.entries⌝ )))(dirs), abs(tree0, ROOT_INO)(dirs0), ∃ ino. ((abs|(tree, ROOT_INO, p, ino) * abs(dnode(md, sdt), ino)))(dirs) |
tree[p] = dnode(md, sdt), ((abs|(tree, ROOT_INO, p, ino) * ino => mkdir(# entries, md, # links(ino, dirs), m1, entries) * abs(sdt, entries)))(dirs), afs-cons(dirs, files), fids-cons(tree, abs-files(files), ofh), ispath(p, ROOT_INO, ino, dirs, files), p ∈ tree ⊦ abs(tree0, ROOT_INO)(dirs0), ∃ ino. ((abs|(tree, ROOT_INO, p, ino) * abs(dnode(md, sdt), ino)))(dirs), ∃ ad. ad.meta = md ∧ ad.size = # ad.entries ∧ (((ino => ad * abs(sdt, ad.entries)) * abs|(tree, ROOT_INO, p, ino)))(dirs)
Used simplifier rules: ⊦ ⌜bv⌝ (dirs) ↔ bv; (s)% ⊦ ((D ∧ D0))(dirs) ↔ D(dirs) ∧ D0(dirs); (s)%sep-com: ⊦ D * D0 = D0 * D; from specification heap-sep[dir-heap]%sep-ass: ⊦ (D * D0) * D1 = D * D0 * D1; from specification heap-sep[dir-heap]%and-com: ⊦ (D ∧ D0) = (D0 ∧ D); from specification heap-sep[dir-heap]%and-ass: ⊦ ((D ∧ D0) ∧ D1) = (D ∧ D0 ∧ D1); from specification heap-sep[dir-heap]% ⊦ (⌜bv⌝ ∧ D) * D0 = (⌜bv⌝ ∧ D * D0); (s)% ⊦ ((_∃ adD * D))(dirs) ↔ (∃ ad. ((adD(ad) * D))(dirs)); (s)