| tree1 = fnode(fid), ((abs(tree1, m) * D1))(dirs), D0(dirs), m ∈ files, ∀ ino. ⌜ino⌝ ∈ tree1.fids → ino ∈ files, ∀ ino. ¬ ino ∈ files ∨ ¬ ino ∈ dirs ⊦ ¬ tree1.dir? ∧ ⌜m⌝ = tree1.fid |
⊦ abs(fnode(fid), ino) = (emp ∧ ⌜ino = fid.ino⌝ )
D0(dirs), D1(dirs), fid.ino ∈ files, ∀ ino. ⌜ino⌝ = fid → ino ∈ files, ∀ ino. ¬ ino ∈ files ∨ ¬ ino ∈ dirs ⊦ ⌜fid.ino⌝ = fid
Used simplifier rules: abs-fnode: ⊦ abs(fnode(fid), ino) = (emp ∧ ⌜ino = fid.ino⌝ );% ⊦ fnode(fid).fid = fid; (s)% ⊦ ¬ fnode(fid).dir?; (s)% ⊦ fid ∈ {fid0} ↔ fid = fid0; (s)% ⊦ fnode(fid).fids = {fid} ; (s)% ⊦ ⌜bv⌝ (dirs) ↔ bv; (s)% ⊦ ((D ∧ D0))(dirs) ↔ D(dirs) ∧ D0(dirs); (s)%and-com: ⊦ (D ∧ D0) = (D0 ∧ D); from specification heap-sep[dir-heap]%and-ass: ⊦ ((D ∧ D0) ∧ D1) = (D ∧ D0 ∧ D1); from specification heap-sep[dir-heap]%sep-com: ⊦ D * D0 = D0 * D; from specification heap-sep[dir-heap]%sep-ass: ⊦ (D * D0) * D1 = D * D0 * D1; from specification heap-sep[dir-heap]% ⊦ emp * D = D; (s)% ⊦ (⌜bv⌝ ∧ D) * D0 = (⌜bv⌝ ∧ D * D0); (s)