Used simplifier rules: Max-in: ⊦ s ≠ ∅ → s.max ∈ s;%Min-in: ⊦ s ≠ ∅ → s.min ∈ s;%size-zero-01: ⊦ s ≠ ∅ → # s ≠ 0; (forward) from specification set-basic