| #(s1 ++ a) < # s0, ∀ s0. # s1 < # s0 → (∃ a. a ∈ s0 ∧ ¬ a ∈ s1) ⊦ ∃ a0. a0 ∈ s0 ∧ ¬ a0 ∈ s1 ++ a |
#(s1 ++ a) < # s0, ∀ s0. # s1 < # s0 → (∃ a. a ∈ s0 ∧ ¬ a ∈ s1) ⊦ ∃ a0. a0 ∈ s0 ∧ a0 ≠ a ∧ ¬ a0 ∈ s1
Used simplifier rules: In-insert: ⊦ a ∈ s ++ b ↔ a = b ∨ a ∈ s;% ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic