| str ∈ sdt ⊦ ((abs(sdt, sdi) * D))(dirs) ↔ (∃ tree, ino, sdi0, sdt0. ¬ str ∈ sdt0 ∧ sdt = sdt0[str, tree] ∧ ¬ str ∈ sdi0 ∧ sdi = sdi0[str, ino] ∧ ((abs(tree, ino) * abs(sdt0, sdi0) * D))(dirs)) |
⊦ ¬ name ∈ sdt → abs(sdt[name, tree], entries) = (⌜name ∈ entries⌝ ∧ abs(tree, entries[name]) * abs(sdt, entries -- name))
⊦ ((abs(sdt, sdi) * D))(dirs) ∧ ¬ str ∈ sdt → sdi -- str = sdi
⊦ str ∈ sdt ∧ ((abs(sdt, sdi) * D))(dirs) → str ∈ sdi
⊦ str ∈ sdi ∧ ((abs(sdt, sdi) * D))(dirs) → str ∈ sdt
((abs(sdt, sdi) * D))(dirs), str ∈ sdi, str ∈ sdt ⊦ ∃ tree, ino, sdi0, sdt0. ¬ str ∈ sdt0 ∧ sdt = sdt0[str, tree] ∧ ¬ str ∈ sdi0 ∧ sdi = sdi0[str, ino] ∧ ((abs(tree, ino) * abs(sdt0, sdi0) * D))(dirs)
Used simplifier rules: abs-rec: ⊦ ¬ name ∈ sdt → abs(sdt[name, tree], entries) = ( ⌜name ∈ entries⌝ ∧ abs(tree, entries[name]) * abs(sdt, entries -- name));%entries-del: ⊦ ((abs(sdt, sdi) * D))(dirs) ∧ ¬ str ∈ sdt → sdi -- str = sdi;%entries-dom2: ⊦ str ∈ sdt ∧ ((abs(sdt, sdi) * D))(dirs) → str ∈ sdi;%entries-dom1: ⊦ str ∈ sdi ∧ ((abs(sdt, sdi) * D))(dirs) → str ∈ sdt;%and-com: ⊦ (D ∧ D0) = (D0 ∧ D); from specification heap-sep[dir-heap]%and-ass: ⊦ ((D ∧ D0) ∧ D1) = (D ∧ D0 ∧ D1); from specification heap-sep[dir-heap]% ⊦ (true ∧ D) = D; (s)%sep-com: ⊦ D * D0 = D0 * D; from specification heap-sep[dir-heap]%sep-ass: ⊦ (D * D0) * D1 = D * D0 * D1; from specification heap-sep[dir-heap]% ⊦ entries[str, ino] -- str = entries -- str; (s)% ⊦ entries[str, ino][str] = ino; (s)% ⊦ ⌜true⌝ = true; (s)% ⊦ str ∈ entries[str, ino]; (s)