| a ∈ s, ∀ s0. #(s0 ∪ s) = # s0 + # s - #(s0 ∩ s) ⊦ #((s ∪ s0) ++ a) = # s0 + # s - #(s0 ∩ s) |
a ∈ s, a0 ∈ s, ∀ s0. #(s0 ∪ s) = # s0 + # s - #(s0 ∩ s) ⊦ #(s ∪ s0) = # s0 + # s - #(s0 ∩ s)
Used simplifier rules: uninsert: ⊦ a ∈ s → (s ∪ s0) ++ a = s ∪ s0;%una: ⊦ (s ∪ s0) ∪ s1 = s ∪ s0 ∪ s1;%unc: ⊦ s ∪ s0 = s0 ∪ s;% ⊦ ¬ a ∈ ∅; (s)% ⊦ s1 = s2 ↔ (∀ a. a ∈ s1 ↔ a ∈ s2); (s)%ne-01: ⊦ a ∈ s → s ≠ ∅; (forward) from specification set-basic