| ∀ key. key.dentry? ∧ key.ino = ino → (key ∈ ks ↔ key.name ∈ entries), ∀ key. key ∈ ks → key.dentry? ∧ key.ino = ino ⊦ # ks = # entries ↔ true |
∀ key. key ∈ ks → key.dentry? ∧ key.ino = ino, ∀ key. key.dentry? ∧ key.ino = ino → (key ∈ ks ↔ key.name ∈ entries) ⊦ # ks = # entries