| asynced0 ↔ asynced, dirs0 = dirs, files0 = files, ino = ROOT_INO, p0 = p, user0 = user, afs-cons(dirs, files), of-cons(of, dirs, files) ⊦ [vfs_walk#(p, user, dirs, files, asynced; ino, err)] ( ⌊err⌋ ∨ err = ESUCCESS ∧ ispath(p0, ROOT_INO, ino, dirs0, files0) ∧ px-parent(user0, p0, ROOT_INO, dirs0, files0) ∨ err = ENOENT ∧ ¬ ispath(p0, ROOT_INO, dirs0, files0) ∨ err = EACCESS ∧ p0 ≠ ε ∧ (∃ p'. p' ⊑ parent(p0) ∧ ispath(p', ROOT_INO, dirs0, files0) ∧ ¬ px(user0, p', ROOT_INO, dirs0, files0)) → ⟪if err = ESUCCESS then choose inode with true in {afs_iget#(ino, dirs, files, asynced; inode, err); if err = ESUCCESS then if pw(user, inode.meta) then {inode.meta := md; afs_check_commit#(dirs, files; err; asynced); if err = ESUCCESS then afs_write_inode#(inode; err, dirs, files; asynced)} else err := EACCESS}⟫ (of-cons(of, dirs, files) ∧ afs-cons(dirs, files))) |
ino = ROOT_INO, afs-cons(dirs, files), of-cons(of, dirs, files) ⊦ [vfs_walk#(p, user, dirs, files, asynced; ino, err)] ( ⌊err⌋ ∨ err = ESUCCESS ∧ ispath(p, ROOT_INO, ino, dirs, files) ∧ px-parent(user, p, ROOT_INO, dirs, files) ∨ err = ENOENT ∧ ¬ ispath(p, ROOT_INO, dirs, files) ∨ err = EACCESS ∧ p ≠ ε ∧ (∃ p'. p' ⊑ parent(p) ∧ ispath(p', ROOT_INO, dirs, files) ∧ ¬ px(user, p', ROOT_INO, dirs, files)) → ⟪if err = ESUCCESS then choose inode with true in {afs_iget#(ino, dirs, files, asynced; inode, err); if err = ESUCCESS then if pw(user, inode.meta) then {inode.meta := md; afs_check_commit#(dirs, files; err; asynced); if err = ESUCCESS then afs_write_inode#(inode; err, dirs, files; asynced)} else err := EACCESS}⟫ (of-cons(of, dirs, files) ∧ afs-cons(dirs, files)))