| valid-content(files1), ∀ ino. ino ∈ files0 → valid-content(ino, files0) ⊦ ∀ ino, n. (ino ∈ files0 ∧ n ∈ files0[ino].content → n * VFS_PAGE_SIZE < files0[ino].size) → ino ∈ files1 ∧ n ∈ files1[ino].content → n * VFS_PAGE_SIZE < files1[ino].size |
valid-content(files1), ino ∈ files1, n ∈ files1[ino].content, files1[ino].size ≤ n * VFS_PAGE_SIZE, ino ∈ files0 ∧ n ∈ files0[ino].content → n * VFS_PAGE_SIZE < files0[ino].size, ∀ ino. ino ∈ files0 → valid-content(ino, files0) ⊦
Used simplifier rules: ⊦ m < n ↔ ¬ n ≤ m; (ss)