| s.min < (s ++ a).min, s.max ∈ s, s.min ∈ s ⊦ # s = 0, s = ∅, s.max < s.min, s.min ∈ s ++ a ∧ (∀ b. b ∈ s ++ a → ¬ b < s.min) |
s.min < (s ++ a).min, a < s.min, a < (s ++ a).min, s.min ∈ s, s.max ∈ s ⊦ # s = 0, s = ∅, s.max < s.min, a ∈ s
Used simplifier rules: Max-max: ⊦ a ∈ s → ¬ s.max < a;%Min-min: ⊦ a ∈ s → ¬ a < s.min;%lel: ⊦ a < b ∧ a = c → c < b; (forward) from specification oelem%transitivity: ⊦ a < b ∧ b < c → a < c; (forward) from specification oelem% ⊦ a ∈ s ++ b ↔ a = b ∨ a ∈ s; (s)