Used simplifier rules: butlast-last: x ≠ [] ⊦ x.butlast + x.last ' = x;%a: ⊦ (x + y) + z = x + y + z; from specification list% ⊦ x + a = x + a '; (s)