| s.min ∈ s, s.max ∈ s ⊦ # s = 0, (s ++ a).max = a, s = ∅, a < s.max, s.max < s.min, a < s.min |
a ∈ s, ∀ b. b ∈ s → ¬ a < b ⊦ s.max = a
Used simplifier rules: max-gr: ⊦ s.max < a ∧ s ≠ ∅ → ¬ a ∈ s;% ⊦ a ∈ s ++ b ↔ a = b ∨ a ∈ s; (s)%nll: ⊦ ¬ b < a ∧ b < c → a < c; (forward) from specification oelem% ⊦ ¬ a < a; (s) Used terms: a, s ++ a