Used simplifier rules: restN-len: ⊦ restn(# x, x + y) = y;%a: ⊦ (x + y) + z = x + y + z; from specification list