| tree0 = fnode(fid), ((abs(tree0, ino) * D0))(dirs), ((abs(tree1, ino) * D1))(dirs), ∀ ino. ¬ ino ∈ files ∨ ¬ ino ∈ dirs, ∀ ino. ⌜ino⌝ ∈ tree0.fids → ino ∈ files, ∀ ino. ⌜ino⌝ ∈ tree1.fids → ino ∈ files, ∀ tree1, ino, D1, dirs, tree0, D0, files. ((abs(tree1, ino) * D1))(dirs) ∧ ((abs(tree0, ino) * D0))(dirs) ∧ (∀ ino. ⌜ino⌝ ∈ tree1.fids → ino ∈ files) ∧ (∀ ino. ⌜ino⌝ ∈ tree0.fids → ino ∈ files) ∧ (∀ ino. ¬ ino ∈ files ∨ ¬ ino ∈ dirs) → (p0 ∈ tree0 ↔ p0 ∈ tree1) ∧ (p0 ∈ tree0 → (tree0[p0].dir? ↔ tree1[p0].dir?) ∧ (tree0[p0].dir? ⊃ tree0[p0].meta = tree1[p0].meta;tree0[p0].fid = tree1[p0].fid)) ⊦ (str ' ∈ tree0 ∧ p0 ∈ tree0[str '] ↔ str ' ∈ tree1 ∧ p0 ∈ tree1[str ']) ∧ ( str ' ∈ tree0 ∧ p0 ∈ tree0[str '] → (tree0[str ' + p0].dir? ↔ tree1[str ' + p0].dir?) ∧ (tree0[str ' + p0].dir? ⊃ tree0[str ' + p0].meta = tree1[str ' + p0].meta;tree0[str ' + p0].fid = tree1[str ' + p0].fid)) |
⊦ abs(fnode(fid), ino) = (emp ∧ ⌜ino = fid.ino⌝ )
((abs(tree1, fid.ino) * D1))(dirs), D0(dirs), p0 ∈ tree1[str '], str ' ∈ tree1, ∀ ino0. ⌜ino0⌝ = fid → ino0 ∈ files, ∀ ino. ¬ ino ∈ files ∨ ¬ ino ∈ dirs, ∀ ino. ⌜ino⌝ ∈ tree1.fids → ino ∈ files, ∀ tree1, ino, D1, dirs, tree0, D0, files. ((abs(tree1, ino) * D1))(dirs) ∧ ((abs(tree0, ino) * D0))(dirs) ∧ (∀ ino. ⌜ino⌝ ∈ tree1.fids → ino ∈ files) ∧ (∀ ino. ⌜ino⌝ ∈ tree0.fids → ino ∈ files) ∧ (∀ ino. ¬ ino ∈ files ∨ ¬ ino ∈ dirs) → (p0 ∈ tree0 ↔ p0 ∈ tree1) ∧ (p0 ∈ tree0 → (tree0[p0].dir? ↔ tree1[p0].dir?) ∧ (tree0[p0].dir? ⊃ tree0[p0].meta = tree1[p0].meta;tree0[p0].fid = tree1[p0].fid)) ⊦
Used simplifier rules: abs-fnode: ⊦ abs(fnode(fid), ino) = (emp ∧ ⌜ino = fid.ino⌝ );% ⊦ str ' ∈ fnode(fid) ↔ false; (s)% ⊦ fid ∈ {fid0} ↔ fid = fid0; (s)% ⊦ fnode(fid).fids = {fid} ; (s)% ⊦ ⌜bv⌝ (dirs) ↔ bv; (s)% ⊦ ((D ∧ D0))(dirs) ↔ D(dirs) ∧ D0(dirs); (s)%and-com: ⊦ (D ∧ D0) = (D0 ∧ D); from specification heap-sep[dir-heap]%and-ass: ⊦ ((D ∧ D0) ∧ D1) = (D ∧ D0 ∧ D1); from specification heap-sep[dir-heap]%sep-com: ⊦ D * D0 = D0 * D; from specification heap-sep[dir-heap]%sep-ass: ⊦ (D * D0) * D1 = D * D0 * D1; from specification heap-sep[dir-heap]% ⊦ emp * D = D; (s)% ⊦ (⌜bv⌝ ∧ D) * D0 = (⌜bv⌝ ∧ D * D0); (s)