| ((ino => mkdir(# entries, md, m0, m1, entries) * (abs(sdt0 -- str, entries -- str) * abs(sdt0[str], entries[str])) * D1))(dirs), ((((abs(sdt -- str, entries -- str) * abs(sdt[str], entries[str])) * ino => mkdir(# entries, md, m0, m1, entries)) * D0))(dirs), str ∈ entries, str ∈ sdt, str ∈ sdt0, ((abs(sdt0[str], entries[str]) * D1 * abs(sdt0 -- str, entries -- str) * ino => mkdir(# entries, md, m0, m1, entries)))(dirs) ∧ ((abs(sdt[str], entries[str]) * D0 * ino => mkdir(# entries, md, m0, m1, entries) * abs(sdt -- str, entries -- str)))(dirs) ∧ (∀ ino. ⌜ino⌝ ∈ sdt0[str].fids → ino ∈ files) ∧ (∀ ino. ⌜ino⌝ ∈ sdt[str].fids → ino ∈ files) ∧ (∀ ino. ¬ ino ∈ files ∨ ¬ ino ∈ dirs) → (p0 ∈ sdt[str] ↔ p0 ∈ sdt0[str]) ∧ ( p0 ∈ sdt[str] → (sdt[str][p0].dir? ↔ sdt0[str][p0].dir?) ∧ (sdt[str][p0].dir? ⊃ sdt[str][p0].meta = sdt0[str][p0].meta;sdt[str][p0].fid = sdt0[str][p0].fid)), ∀ ino0. ⌜ino0⌝ ∈ sdt0.fids → ino0 ∈ files, ∀ tree1, ino, D1, dirs, tree0, D0, files. ((abs(tree1, ino) * D1))(dirs) ∧ ((abs(tree0, ino) * D0))(dirs) ∧ (∀ ino. ⌜ino⌝ ∈ tree1.fids → ino ∈ files) ∧ (∀ ino. ⌜ino⌝ ∈ tree0.fids → ino ∈ files) ∧ (∀ ino. ¬ ino ∈ files ∨ ¬ ino ∈ dirs) → (p0 ∈ tree0 ↔ p0 ∈ tree1) ∧ (p0 ∈ tree0 → (tree0[p0].dir? ↔ tree1[p0].dir?) ∧ (tree0[p0].dir? ⊃ tree0[p0].meta = tree1[p0].meta;tree0[p0].fid = tree1[p0].fid)), ∀ ino. ¬ ino ∈ files ∨ ¬ ino ∈ dirs, ∀ ino0. ⌜ino0⌝ ∈ sdt.fids → ino0 ∈ files ⊦ (p0 ∈ sdt[str] ↔ p0 ∈ sdt0[str]) ∧ ( p0 ∈ sdt[str] → (sdt[str][p0].dir? ↔ sdt0[str][p0].dir?) ∧ (sdt[str][p0].dir? ⊃ sdt[str][p0].meta = sdt0[str][p0].meta;sdt[str][p0].fid = sdt0[str][p0].fid)) |
((((abs(sdt -- str, entries -- str) * abs(sdt[str], entries[str])) * ino => mkdir(# entries, md, m0, m1, entries)) * D0))(dirs), ((ino => mkdir(# entries, md, m0, m1, entries) * (abs(sdt0 -- str, entries -- str) * abs(sdt0[str], entries[str])) * D1))(dirs), str ∈ sdt0, str ∈ sdt, str ∈ entries, ∀ ino0. ⌜ino0⌝ ∈ sdt.fids → ino0 ∈ files, ∀ ino. ¬ ino ∈ files ∨ ¬ ino ∈ dirs, ∀ tree1, ino, D1, dirs, tree0, D0, files. ((abs(tree1, ino) * D1))(dirs) ∧ ((abs(tree0, ino) * D0))(dirs) ∧ (∀ ino. ⌜ino⌝ ∈ tree1.fids → ino ∈ files) ∧ (∀ ino. ⌜ino⌝ ∈ tree0.fids → ino ∈ files) ∧ (∀ ino. ¬ ino ∈ files ∨ ¬ ino ∈ dirs) → (p0 ∈ tree0 ↔ p0 ∈ tree1) ∧ (p0 ∈ tree0 → (tree0[p0].dir? ↔ tree1[p0].dir?) ∧ (tree0[p0].dir? ⊃ tree0[p0].meta = tree1[p0].meta;tree0[p0].fid = tree1[p0].fid)), ∀ ino0. ⌜ino0⌝ ∈ sdt0.fids → ino0 ∈ files ⊦ (p0 ∈ sdt[str] ↔ p0 ∈ sdt0[str]) ∧ ( p0 ∈ sdt[str] → (sdt[str][p0].dir? ↔ sdt0[str][p0].dir?) ∧ (sdt[str][p0].dir? ⊃ sdt[str][p0].meta = sdt0[str][p0].meta;sdt[str][p0].fid = sdt0[str][p0].fid)), (⌜ino0⌝ ∈ sdt0[str].fids → ino0 ∈ files) ∧ (⌜ino1⌝ ∈ sdt[str].fids → ino1 ∈ files)
Used simplifier rules: sep-com: ⊦ D * D0 = D0 * D; from specification heap-sep[dir-heap]%sep-ass: ⊦ (D * D0) * D1 = D * D0 * D1; from specification heap-sep[dir-heap]