a ∈ x, # rmdup(x) ≤ # rmdup(x -l a) ⊦
Used simplifier rules: a: ⊦ (x + y) + z = x + y + z; from specification list%rmdup-y: ⊦ a ∈ x → rmdup(a ' + x) = rmdup(x); from specification list-dup