a ∈ s ⊦ ∃ s0. s = s0 ++ a ∧ ¬ a ∈ s0
Used simplifier rules: in-03: ⊦ ¬ a ∈ s → (a ∈ s ++ b ↔ a = b); from specification infset-basic