| dirs[ino] = mkdir(m, md, m0, m1, entries), tree = dnode(md0, sdt), ((abs(tree, ino) * D))(dirs), ∀ tree, ino, D, dirs, files. ((abs(tree, ino) * D))(dirs) ∧ (∀ ino. ⌜ino⌝ ∈ tree.fids → ino ∈ files) ∧ (∀ ino. ¬ ino ∈ files ∨ ¬ ino ∈ dirs) → (ispath(p0, ino, dirs, files) ↔ p0 ∈ tree), ∀ ino. ⌜ino⌝ ∈ tree.fids → ino ∈ files, ∀ ino. ¬ ino ∈ files ∨ ¬ ino ∈ dirs ⊦ ino ∈ dirs ∧ str ∈ entries ∧ ispath(p0, entries[str], dirs, files) ↔ str ' ∈ tree ∧ p0 ∈ tree[str '] |
⊦ abs(dnode(md, sdt), ino) = _∃(λ ad. ino => ad * abs(sdt, ad.entries) ∧ ⌜ad.meta = md⌝ ∧ ⌜ad.size = # ad.entries⌝ )
((ino => mkdir(# entries, md, m0, m1, entries) * abs(sdt, entries) * D))(dirs), ∀ ino. ¬ ino ∈ files ∨ ¬ ino ∈ dirs, ∀ tree, ino, D, dirs, files. ((abs(tree, ino) * D))(dirs) ∧ (∀ ino. ⌜ino⌝ ∈ tree.fids → ino ∈ files) ∧ (∀ ino. ¬ ino ∈ files ∨ ¬ ino ∈ dirs) → (ispath(p0, ino, dirs, files) ↔ p0 ∈ tree), ∀ ino0. ⌜ino0⌝ ∈ sdt.fids → ino0 ∈ files ⊦ str ∈ entries ∧ ispath(p0, entries[str], dirs, files) ↔ str ∈ sdt ∧ p0 ∈ sdt[str]
Used simplifier rules: abs-dnode: ⊦ abs(dnode(md, sdt), ino) = _∃ (λ ad. ino => ad * abs(sdt, ad.entries) ∧ ⌜ad.meta = md⌝ ∧ ⌜ad.size = # ad.entries⌝ );% ⊦ mkdir(m, md, m0, m1, entries).entries = entries; (s)% ⊦ mkdir(m, md, m0, m1, entries).size = m; (s)% ⊦ dnode(md, sdt).fids = sdt.fids; (s)% ⊦ ((ino => ad * D))(dirs) → ino ∈ dirs; (s)% ⊦ ((ino => ad * D))(dirs) → (dirs[ino] = ad0 ↔ ad = ad0); (s)% ⊦ ⌜bv⌝ (dirs) ↔ bv; (s)% ⊦ ((D ∧ D0))(dirs) ↔ D(dirs) ∧ D0(dirs); (s)%sep-com: ⊦ D * D0 = D0 * D; from specification heap-sep[dir-heap]%sep-ass: ⊦ (D * D0) * D1 = D * D0 * D1; from specification heap-sep[dir-heap]%and-com: ⊦ (D ∧ D0) = (D0 ∧ D); from specification heap-sep[dir-heap]%and-ass: ⊦ ((D ∧ D0) ∧ D1) = (D ∧ D0 ∧ D1); from specification heap-sep[dir-heap]% ⊦ (⌜bv⌝ ∧ D) * D0 = (⌜bv⌝ ∧ D * D0); (s)% ⊦ ((_∃ adD * D))(dirs) ↔ (∃ ad. ((adD(ad) * D))(dirs)); (s)%str ∈ sdt ⊦ dnode(md, sdt)[str '] = sdt[str]; (s)% ⊦ str ' ∈ dnode(md, sdt) ↔ str ∈ sdt; (s)