Protected methods in C-FFS
Enforces higher semantics than xok:
- well-formed updates: legal, aligned file names
- atomicity: locking for recoverability
- implicit updates: fresh mod times, …
Uses xok methods:
- protection is ~700 lines of code vs 7000 for FS