| ∀ str. str ∈ entries ↔ str ∈ sdt, ∀ entries0, sdt. # entries0 < # entries → (∀ str. str ∈ entries0 ↔ str ∈ sdt) → # entries0 = # sdt ⊦ # entries = # sdt, ∀ str, ino, entries0. ¬(entries = entries0[str, ino] ∧ ¬ str ∈ entries0) |
∀ str0. str0 ∈ entries0[str, ino] ↔ str0 ∈ sdt, ∀ entries1, sdt. # entries1 < # entries0[str, ino] → (∀ str. str ∈ entries1 ↔ str ∈ sdt) → # entries1 = # sdt ⊦ # entries0 + 1 = # sdt, str ∈ entries0
Used simplifier rules: ⊦ ¬ str ∈ entries → # entries[str, ino] = # entries + 1; (s)