| isdir ↔ true, root[path].dir? ↔ ino1 ∈ dirs, err = err1, err1 = ESUCCESS, ino = ino1, mode = MODE_R, root.dir?, dom of < ino0, abs(root, ROOT_INO)(dirs), afs-cons(dirs, files), fids-cons(root, abs-files(files), abs-of(of)), ispath(path, ROOT_INO, ino1, dirs, files), of-cons(of, dirs, files), px-parent(user, path, ROOT_INO, dirs, files), psynced → asynced ⊦ [abort; if err = ESUCCESS then if ¬(inode.directory ↔ isdir) then err := (inode.directory ⊃ EISDIR;ENOTDIR) else if (mode = MODE_R ∨ mode = MODE_RW) ∧ ¬ pr(user, inode.meta) ∨ (mode = MODE_W ∨ mode = MODE_RW) ∧ ¬ pw(user, inode.meta) then err := EACCESS; strings := strings0; err1 := err; if err1 = ESUCCESS then afs_readdir#(inode, dirs, files, asynced; strings, err1)] ⟨posix_readdir#(path, user, root, abs-files(files), abs-of(of); strings0, err0)⟩ ((psynced → asynced) ∧ strings = strings0 ∧ err1 = err0), pre-iget(ino, dirs, files) |