Used simplifier rules: Difference: ⊦ a ∈ s1 \ s2 ↔ a ∈ s1 ∧ ¬ a ∈ s2;% ⊦ a ∈ s → s ++ a = s; (s)% ⊦ a ∈ s ++ b ↔ a = b ∨ a ∈ s; (s)