Used simplifier rules: ⊦ ¬ nx ⊑ nx0 + nx1 → ¬ nx ⊑ nx0; (s)%a: ⊦ (nx + nx0) + nx1 = nx + nx0 + nx1; from specification list[nat-list-set]