| ((abs(sdt0[str0], ino3) * {dirs3} ))(dirs), ((abs(tree, ino1) * abs(sdt0, sdi) * {dirs0} * ino0 => mkdir(n0, md, m0, n, entries0)))(dirs1 ∪ dirs2), ((ino0 => mkdir(n0, md, m0, n, entries0) * {dirs0} * abs(sdt0, sdi)))(dirs2), abs(tree, ino1)(dirs1), ino2 ∈ dirs, str0 ∈ sdt0, ino ∈ dirs2, sdi[str, ino1] ⊆ entries0, dirs1 ⊥ dirs2, ∀ str0. str0 ∈ sdt0[str, tree] → (∀ ino, dirs, ino0, dirs0, files. ino ∈ dirs ∧ ((abs(sdt0[str, tree][str0], ino0) * {dirs0} ))(dirs) → ino ∈ dirs0 ∨ (∃ p. ispath(p, ino0, ino, dirs, files))), ∀ sdt1, ino0, n0, md, m0, n, entries0, entries, dirs0, dirs, ino, files. # sdt1 < # sdt0[str, tree] → (((ino0 => mkdir(n0, md, m0, n, entries0) * abs(sdt1, entries)) * {dirs0} ))(dirs) ∧ ino ∈ dirs ∧ entries ⊆ entries0 ∧ (∀ str. str ∈ sdt1 → (∀ ino, dirs, ino0, dirs0, files. ino ∈ dirs ∧ ((abs(sdt1[str], ino0) * {dirs0} ))(dirs) → ino ∈ dirs0 ∨ (∃ p. ispath(p, ino0, ino, dirs, files)))) → ino ∈ dirs0 ∨ (∃ p. ispath(p, ino0, ino, dirs, files)) ⊦ str ∈ sdt0, str ∈ sdi, ino ∈ dirs0, ino2 ∈ dirs3, ∃ p. ispath(p, ino0, ino, dirs1 ∪ dirs2, files), ∃ p. ispath(p, ino3, ino2, dirs, files0) |
⊦ str ∈ sdt ∧ ((abs(sdt, sdi) * D))(dirs) → str ∈ sdi
⊦ str ∈ sdi ∧ ((abs(sdt, sdi) * D))(dirs) → str ∈ sdt
((abs(sdt0[str0], ino3) * {dirs3} ))(dirs), ((abs(tree, ino1) * abs(sdt0, sdi) * {dirs0} * ino0 => mkdir(n0, md, m0, n, entries0)))(dirs1 ∪ dirs2), ((ino0 => mkdir(n0, md, m0, n, entries0) * {dirs0} * abs(sdt0, sdi)))(dirs2), abs(tree, ino1)(dirs1), str0 ∈ sdi, ino2 ∈ dirs, ino ∈ dirs2, str0 ∈ sdt0, sdi[str, ino1] ⊆ entries0, dirs1 ⊥ dirs2, ∀ str0. str0 ∈ sdt0[str, tree] → (∀ ino, dirs, ino0, dirs0, files. ino ∈ dirs ∧ ((abs(sdt0[str, tree][str0], ino0) * {dirs0} ))(dirs) → ino ∈ dirs0 ∨ (∃ p. ispath(p, ino0, ino, dirs, files))), ∀ sdt1, ino0, n0, md, m0, n, entries0, entries, dirs0, dirs, ino, files. # sdt1 < # sdt0[str, tree] → (((ino0 => mkdir(n0, md, m0, n, entries0) * abs(sdt1, entries)) * {dirs0} ))(dirs) ∧ ino ∈ dirs ∧ entries ⊆ entries0 ∧ (∀ str. str ∈ sdt1 → (∀ ino, dirs, ino0, dirs0, files. ino ∈ dirs ∧ ((abs(sdt1[str], ino0) * {dirs0} ))(dirs) → ino ∈ dirs0 ∨ (∃ p. ispath(p, ino0, ino, dirs, files)))) → ino ∈ dirs0 ∨ (∃ p. ispath(p, ino0, ino, dirs, files)) ⊦ str ∈ sdt0, str ∈ sdi, ino ∈ dirs0, ino2 ∈ dirs3, ∃ p. ispath(p, ino0, ino, dirs1 ∪ dirs2, files), ∃ p. ispath(p, ino3, ino2, dirs, files0)
Used simplifier rules: entries-dom2: ⊦ str ∈ sdt ∧ ((abs(sdt, sdi) * D))(dirs) → str ∈ sdi;%entries-dom1: ⊦ str ∈ sdi ∧ ((abs(sdt, sdi) * D))(dirs) → str ∈ sdt;%sep-com: ⊦ D * D0 = D0 * D; from specification heap-sep[dir-heap]%sep-ass: ⊦ (D * D0) * D1 = D * D0 * D1; from specification heap-sep[dir-heap]