| a ∈ st.keys, # st.keys ≤ # (st -- a).keys ⊦ |
st.keys = ∅, a ∈ st, 0 ≤ 0 - 1 ⊦ a < st.min
Used simplifier rules: del-01: ⊦ a ∈ st.keys → (st -- a).keys = st.keys -- a;%Keys: ⊦ a ∈ st.keys ↔ a ∈ st;%Min-min: ⊦ a ∈ st → ¬ a < st.min;%inf: ⊦ a ∈ st → a ∈ st.keys;% ⊦ # ∅ = 0; (s)%size-zero-02: ⊦ # s = 0 → s = ∅; (forward) from specification set-basic%leprf: ⊦ m ≤ m - 1 → m = 0; (forward) from specification nat% ⊦ a ∈ s → #(s -- a) = # s - 1; (s)