| sdt = ∅, (((ino0 => mkdir(n0, md, m0, n, entries0) * abs(sdt, entries)) * {dirs0} ))(dirs), ino ∈ dirs, entries ⊆ entries0, ∀ str. str ∈ sdt → (∀ ino, dirs, ino0, dirs0, files. ino ∈ dirs ∧ ((abs(sdt[str], ino0) * {dirs0} ))(dirs) → ino ∈ dirs0 ∨ (∃ p. ispath(p, ino0, ino, dirs, files))), ∀ sdt0, ino0, n0, md, m0, n, entries0, entries, dirs0, dirs, ino, files. # sdt0 < # sdt → (((ino0 => mkdir(n0, md, m0, n, entries0) * abs(sdt0, entries)) * {dirs0} ))(dirs) ∧ ino ∈ dirs ∧ entries ⊆ entries0 ∧ (∀ str. str ∈ sdt0 → (∀ ino, dirs, ino0, dirs0, files. ino ∈ dirs ∧ ((abs(sdt0[str], ino0) * {dirs0} ))(dirs) → ino ∈ dirs0 ∨ (∃ p. ispath(p, ino0, ino, dirs, files)))) → ino ∈ dirs0 ∨ (∃ p. ispath(p, ino0, ino, dirs, files)) ⊦ ino ∈ dirs0, ∃ p. ispath(p, ino0, ino, dirs, files) |
⊦ abs(∅, entries) = (⌜entries = ∅⌝ ∧ emp)
((ino0 => mkdir(n0, md, m0, n, entries0) * {dirs0} ))(dirs), ino ∈ dirs, ∀ sdt0, ino0, n0, md, m0, n, entries0, entries, dirs0, dirs, ino, files. # sdt0 < # ∅ → (((ino0 => mkdir(n0, md, m0, n, entries0) * abs(sdt0, entries)) * {dirs0} ))(dirs) ∧ ino ∈ dirs ∧ entries ⊆ entries0 ∧ (∀ str. str ∈ sdt0 → (∀ ino, dirs, ino0, dirs0, files. ino ∈ dirs ∧ ((abs(sdt0[str], ino0) * {dirs0} ))(dirs) → ino ∈ dirs0 ∨ (∃ p. ispath(p, ino0, ino, dirs, files)))) → ino ∈ dirs0 ∨ (∃ p. ispath(p, ino0, ino, dirs, files)) ⊦ ino ∈ dirs0, ∃ p. ispath(p, ino0, ino, dirs, files)
Used simplifier rules: abs-empty: ⊦ abs(∅, entries) = (⌜entries = ∅⌝ ∧ emp);% ⊦ ∅ ⊆ entries; (s)% ⊦ ¬ str ∈ ∅; (s)% ⊦ ⌜bv⌝ (dirs) ↔ bv; (s)% ⊦ ((D ∧ D0))(dirs) ↔ D(dirs) ∧ D0(dirs); (s)%and-com: ⊦ (D ∧ D0) = (D0 ∧ D); from specification heap-sep[dir-heap]%and-ass: ⊦ ((D ∧ D0) ∧ D1) = (D ∧ D0 ∧ D1); from specification heap-sep[dir-heap]%sep-com: ⊦ D * D0 = D0 * D; from specification heap-sep[dir-heap]%sep-ass: ⊦ (D * D0) * D1 = D * D0 * D1; from specification heap-sep[dir-heap]% ⊦ emp * D = D; (s)% ⊦ (⌜bv⌝ ∧ D) * D0 = (⌜bv⌝ ∧ D * D0); (s)