| ∀ key. key.dentry? ∧ key.ino = ino → (key ∈ ks ↔ key.name ∈ entries), ∀ key. key ∈ ks → key.dentry? ∧ key.ino = ino, ∀ ks0, ino, entries. # ks0 < # ks → (∀ key. key ∈ ks0 → key.dentry? ∧ key.ino = ino) ∧ (∀ key. key.dentry? ∧ key.ino = ino → (key ∈ ks0 ↔ key.name ∈ entries)) → # ks0 = # entries ⊦ # ks = # entries |
ks = ∅, ∀ key. key ∈ ks → key.dentry? ∧ key.ino = ino, ∀ key. key.dentry? ∧ key.ino = ino → (key ∈ ks ↔ key.name ∈ entries), ∀ ks0, ino, entries. # ks0 < # ks → (∀ key. key ∈ ks0 → key.dentry? ∧ key.ino = ino) ∧ (∀ key. key.dentry? ∧ key.ino = ino → (key ∈ ks0 ↔ key.name ∈ entries)) → # ks0 = # entries ⊦ # ks = # entries
∀ key. key ∈ ks → key.dentry? ∧ key.ino = ino, ∀ key. key.dentry? ∧ key.ino = ino → (key ∈ ks ↔ key.name ∈ entries), ∀ ks0, ino, entries. # ks0 < # ks → (∀ key. key ∈ ks0 → key.dentry? ∧ key.ino = ino) ∧ (∀ key. key.dentry? ∧ key.ino = ino → (key ∈ ks0 ↔ key.name ∈ entries)) → # ks0 = # entries ⊦ # ks = # entries, ks = ∅
Used formulas: ks = ∅