| tree[p0 + str '] = fnode(⌜ino1⌝ ), tree[p0] = dnode(md, sdt), links(ino1, dirs) = ∅, (( m0 => mkdir(# entries, md, m1, m2, entries) * (⌜str ∈ entries⌝ ∧ abs(sdt -- str, entries -- str) * abs(sdt[str], entries[str])) * abs|(tree, ino0, p0, m0)) )(dirs), ispath(p0, ino0, m0, dirs, files), str ∈ entries, ino0 ∈ dirs, ino1 ∈ files, p0 ∈ tree, str ∈ sdt, ∀ ino. ⌜ino⌝ ∈ tree.fids → ino ∈ files, ∀ ino. ¬ ino ∈ files ∨ ¬ ino ∈ dirs, entries[str] ∈ dirs ∨ entries[str] ∈ files ⊦ |
tree[p0] = dnode(md, sdt), tree[p0 + str '] = fnode(⌜ino1⌝ ), links(ino1, dirs) = ∅, ((m0 => mkdir(# entries, md, m1, m2, entries) * (abs(sdt -- str, entries -- str) * abs(sdt[str], entries[str])) * abs|(tree, ino0, p0, m0)) )(dirs), ispath(p0, ino0, m0, dirs, files), str ∈ sdt, p0 ∈ tree, ino1 ∈ files, ino0 ∈ dirs, str ∈ entries, ∀ ino. ¬ ino ∈ files ∨ ¬ ino ∈ dirs, ∀ ino. ⌜ino⌝ ∈ tree.fids → ino ∈ files, entries[str] ∈ dirs ∨ entries[str] ∈ files ⊦
Used simplifier rules: and-com: ⊦ (D ∧ D0) = (D0 ∧ D); from specification heap-sep[dir-heap]%and-ass: ⊦ ((D ∧ D0) ∧ D1) = (D ∧ D0 ∧ D1); from specification heap-sep[dir-heap]% ⊦ (true ∧ D) = D; (s)% ⊦ ⌜true⌝ = true; (s)