| ino ∈ files ⊦ ∀ fid. (fid ∈ abs-files(files)[⌜ino⌝ , mkfile(md, (content.stream to m).buf)] ↔ fid ∈ abs-files(files[ino, mkfile(m, md, m0, content)])) ∧ ( fid ∈ abs-files(files)[⌜ino⌝ , mkfile(md, (content.stream to m).buf)] → abs-files(files)[⌜ino⌝ , mkfile(md, (content.stream to m).buf)][fid] = abs-files(files[ino, mkfile(m, md, m0, content)])[fid]) |
ino ∈ files ⊦ (fid ∈ abs-files(files)[⌜ino⌝ , mkfile(md, (content.stream to m).buf)] ↔ fid ∈ abs-files(files[ino, mkfile(m, md, m0, content)])) ∧ ( fid ∈ abs-files(files)[⌜ino⌝ , mkfile(md, (content.stream to m).buf)] → abs-files(files)[⌜ino⌝ , mkfile(md, (content.stream to m).buf)][fid] = abs-files(files[ino, mkfile(m, md, m0, content)])[fid])