[Imprint]
[Data Privacy Statement]
[E-Mail]
View
long theorem info
. View
the proof
. Back to
main index
. View
the specification
. View
theorem base summary
, View
theorem base listing
, the
used properties by spec
, the
dependency list
, the
symbol table
,
Theorem inv-format
ino = LEB_SIZE ⊦ ⟪vfs_format#(n, isdir, ino, md; dirs, files, asynced; of, ino0, err)⟫ (err = ESUCCESS → asynced ∧ of-cons(of, dirs, files) ∧ dom of < ino0 ∧ afs-cons(dirs, files))
Type: A proof obligation
Validity: The proof is valid.
Features:
Comment:
Used by:
Used by units in proved state:
Proof exists?: Yes
View
the proof
Infos about the proof
Proved?: Yes
Interactions: 2
Proof steps: 21
Used lemmas:
format
,
Used spec theorems:
vfs-base
/
of-cons
Used simplifier rules:
oset
/nat-set/
ls-emptyset
store+set
/open-files/
dom-emp
afs-base
/
afs-cons-init
store
/open-files/
In-empty
error-class
/
esuccess
error-class
/
ecommit