Used simplifier rules: in-01-01: ⊦ a ∈ y → (a ∈ filter(x, y) ↔ a ∈ x);%rm-in-03: ⊦ ¬ a ∈ rmdup(x) → ¬ a ∈ x; (forward) from specification list-dup