| key.dentry? → (key = key ∨ key ∈ ks0 ↔ mklink(key.ino, key.name) ∈ ls), ∀ key0. key0.dentry? → (key0 = key ∨ key0 ∈ ks0 ↔ mklink(key0.ino, key0.name) ∈ ls), ∀ key0. key0 = key ∨ key0 ∈ ks0 → key0.dentry?, ∀ ls0, ks. # ls0 < # ls → (∀ key. key ∈ ks → key.dentry?) ∧ (∀ key. key.dentry? → (key ∈ ks ↔ mklink(key.ino, key.name) ∈ ls0)) → # ks = # ls0 ⊦ # ks0 + 1 = # ls, key ∈ ks0 |
key.dentry? → mklink(key.ino, key.name) ∈ ls, ∀ key0. key0 = key ∨ key0 ∈ ks0 → key0.dentry?, ∀ key0. key0.dentry? → (key0 = key ∨ key0 ∈ ks0 ↔ mklink(key0.ino, key0.name) ∈ ls), ∀ ls0, ks. # ls0 < # ls → (∀ key. key ∈ ks → key.dentry?) ∧ (∀ key. key.dentry? → (key ∈ ks ↔ mklink(key.ino, key.name) ∈ ls0)) → # ks = # ls0 ⊦ # ks0 + 1 = # ls, key ∈ ks0