Used simplifier rules: Butmin: ⊦ s ≠ ∅ → s.butmin = s -- s.min;% ⊦ ¬ a ∈ ∅; (s)% ⊦ a ∈ s -- b ↔ a ≠ b ∧ a ∈ s; (ws)