pub fn permission_split_ty() -> Expr
PermissionSplit: p = p1 + p2 justifies l↦{p}v ⊢ l↦{p1}v ∗ l↦{p2}v. Type: Prop