s.min < a, s.min ∈ s, s.max ∈ s ⊦ # s = 0, (s ++ a) -- s.min = (s -- s.min) ++ a, s = ∅
Used simplifier rules: ⊦ a < b → (b < a ↔ false); (ss)