| key = key ∨ key ∈ ks0 → key.dentry? ∧ key.ino = ino, ∀ key0. key0.dentry? ∧ key0.ino = ino → (key0 = key ∨ key0 ∈ ks0 ↔ key0.name ∈ entries), ∀ key0. key0 ∈ ks0 → key0.dentry? ∧ key0.ino = ino, ∀ ks1, ino, entries. # ks1 < #(ks0 ++ key) → (∀ key. key ∈ ks1 → key.dentry? ∧ key.ino = ino) ∧ (∀ key. key.dentry? ∧ key.ino = ino → (key ∈ ks1 ↔ key.name ∈ entries)) → # ks1 = # entries ⊦ # ks0 + 1 = # entries, key ∈ ks0 |
key.dentry?, ∀ key0. key0.dentry? ∧ key0.ino = key.ino → (key0 = key ∨ key0 ∈ ks0 ↔ key0.name ∈ entries), ∀ key0. key0 ∈ ks0 → key0.dentry? ∧ key0.ino = key.ino, ∀ ks1, ino, entries. # ks1 < #(ks0 ++ key) → (∀ key. key ∈ ks1 → key.dentry? ∧ key.ino = ino) ∧ (∀ key. key.dentry? ∧ key.ino = ino → (key ∈ ks1 ↔ key.name ∈ entries)) → # ks1 = # entries ⊦ # ks0 + 1 = # entries, key ∈ ks0