| tree[p].dir? ↔ m ∈ dirs, ((_∃(λ ino1. abs|(tree, ino, p, ino1) * abs(tree[p], ino1)) * D))(dirs), ispath(p, ino, m, dirs, files), p ∈ tree, ∀ ino. ¬ ino ∈ files ∨ ¬ ino ∈ dirs, ∀ ino. ⌜ino⌝ ∈ tree.fids → ino ∈ files ⊦ meta(p, tree, abs-files(files)) = meta(ε, m, dirs, files) |
⊦ p ∈ tree ∧ ((abs|(tree, ino, p, ino0) * D))(dirs) ∧ ispath(p, ino, ino1, dirs, files) → ino0 = ino1
tree[p].dir? ↔ m ∈ dirs, (((abs|(tree, ino, p, m) * abs(tree[p], m)) * D))(dirs), ispath(p, ino, m, dirs, files), p ∈ tree, ∀ ino. ¬ ino ∈ files ∨ ¬ ino ∈ dirs, ∀ ino. ⌜ino⌝ ∈ tree.fids → ino ∈ files ⊦ meta(p, tree, abs-files(files)) = meta(ε, m, dirs, files)
Used simplifier rules: absc-path: ⊦ p ∈ tree ∧ ((abs|(tree, ino, p, ino0) * D))(dirs) ∧ ispath(p, ino, ino1, dirs, files) → ino0 = ino1;%sep-com: ⊦ D * D0 = D0 * D; from specification heap-sep[dir-heap]%sep-ass: ⊦ (D * D0) * D1 = D * D0 * D1; from specification heap-sep[dir-heap]% ⊦ ((_∃ nD * D))(dirs) ↔ (∃ ino. ((nD(ino) * D))(dirs)); (s)