| ((abs(tree, ino0) * D))(dirs), ispath(str + p0, ino0, ino1, dirs, files), ino1 ∈ files, str + p0 ∈ tree, ∀ tree, ino0, D, dirs, ino1, files. ((abs(tree, ino0) * D))(dirs) ∧ ispath(p0, ino0, ino1, dirs, files) ∧ p0 ∈ tree ∧ ino1 ∈ files → tree[p0] = fnode(⌜ino1⌝ ) ∨ ino1 ∈ dirs ⊦ tree[str + p0] = fnode(⌜ino1⌝ ), ino1 ∈ dirs |
((abs(tree, ino0) * D))(dirs), ispath(p0, dirs[ino0].entries[str], ino1, dirs, files), str ' ∈ tree, p0 ∈ tree[str '], ino1 ∈ files, ino0 ∈ dirs, str ∈ dirs[ino0].entries, ∀ tree, ino0, D, dirs, ino1, files. ((abs(tree, ino0) * D))(dirs) ∧ ispath(p0, ino0, ino1, dirs, files) ∧ p0 ∈ tree ∧ ino1 ∈ files → tree[p0] = fnode(⌜ino1⌝ ) ∨ ino1 ∈ dirs ⊦ tree[str ' + p0] = fnode(⌜ino1⌝ ), ino1 ∈ dirs
Used simplifier rules: ⊦ valid-dir-ino(ino, dirs, files) ↔ ino ∈ dirs; (s)%⊦ ispath(str ' + p, n, m, dirs, files) ↔ valid-dir-ino(n, dirs, files) ∧ str ∈ dirs[n].entries ∧ ispath(p, dirs[n].entries[str], m, dirs, files); (s)%a: ⊦ (p + p0) + p1 = p + p0 + p1; from specification list[path]% ⊦ p + q ∈ tree ↔ p ∈ tree ∧ q ∈ tree[p]; (s)% ⊦ str + p = str ' + p; (s)