| s.max ∈ s, s.min ∈ s, s.max ∈ s0, s.min ∈ s0, s0.min ∈ s0, s0.max ∈ s0, s ⊆ s0 ⊦ # s = 0, # s0 = 0, s = ∅, s0 = ∅, s.min < s0.min, s0.max < s.min, s.max < s0.min, s0.max < s.max, s -- s.min ⊆ s0 -- s0.min |
⊦ s1 ⊆ s2 ↔ (∀ a. a ∈ s1 → a ∈ s2)
Used simplifier rules: Max-max: ⊦ a ∈ s → ¬ s.max < a;%Min-min: ⊦ a ∈ s → ¬ a < s.min;%min-less: ⊦ a ≠ s.min ∧ a ∈ s → s.min < a;% ⊦ a ∈ s -- b ↔ a ≠ b ∧ a ∈ s; (ws)%sub-in: ⊦ a ∈ s ∧ s ⊆ s0 → a ∈ s0; (forward) from specification set-basic% ⊦ a ≠ b → (a < b ↔ ¬ b < a); (ss) Used terms: s0 -- s0.min, s -- s.min