| aP(a)(H), aP0(a)(H), ((aP0 ∧_ s0))(H), ∀ a0, H0. (a0 = a ∨ a0 ∈ s0) ∧ aP0(a0)(H0) → aP(a0)(H0), ∀ s1, aP0, H, aP. # s1 < #(s0 ++ a) → ((aP0 ∧_ s1))(H) ∧ (∀ a, H. a ∈ s1 ∧ aP0(a)(H) → aP(a)(H)) → ((aP ∧_ s1))(H) ⊦ a ∈ s0, ((aP ∧_ s0))(H), ((aP0 ∧_ s0))(H) ∧ (∀ a, H. a ∈ s0 ∧ aP0(a)(H) → aP(a)(H)) |
aP(a)(H), aP0(a0)(H0), aP0(a)(H), a0 ∈ s0, ((aP0 ∧_ s0))(H), ∀ a0, H0. (a0 = a ∨ a0 ∈ s0) ∧ aP0(a0)(H0) → aP(a0)(H0), ∀ s1, aP0, H, aP. # s1 < #(s0 ++ a) → ((aP0 ∧_ s1))(H) ∧ (∀ a, H. a ∈ s1 ∧ aP0(a)(H) → aP(a)(H)) → ((aP ∧_ s1))(H) ⊦ # s0 = 0, s0 = ∅, aP(a0)(H0), a ∈ s0, ((aP ∧_ s0))(H)
Used simplifier rules: size-zero-01: ⊦ s ≠ ∅ → # s ≠ 0; (forward) from specification set-basic%ne-01: ⊦ a ∈ s → s ≠ ∅; (forward) from specification set-basic