| a ∈ rmdup(z) ↔ (∃ y, z0. rmdup(z) = y + (a + z0)), a ∈ z, ∀ y. (∀ a. a ∈ x0 ↔ a ∈ y) → # rmdup(x0) = # rmdup(y), ∀ a0. a0 ≠ a → (a0 ∈ x0 ↔ a0 ∈ y0 ∨ a0 ∈ z) ⊦ # rmdup(x0) + 1 = # rmdup(y0 + z), a ∈ y0, a ∈ x0 |
rmdup(z) = y + a ' + z0, a ∈ z, ∀ y. (∀ a. a ∈ x0 ↔ a ∈ y) → # rmdup(x0) = # rmdup(y), ∀ a0. a0 ≠ a → (a0 ∈ x0 ↔ a0 ∈ y0 ∨ a0 ∈ z) ⊦ # rmdup(x0) + 1 = # rmdup(y0 + z), a ∈ y0, a ∈ x0, a ∈ y, a ∈ z0
Used simplifier rules: rm-in-02: ⊦ a ∈ rmdup(x) ↔ a ∈ x;%rm-notin-01: ⊦ rmdup(x) = y + a ' + z → a ∈ x ∧ ¬ a ∈ y ∧ ¬ a ∈ z;%neq: ⊦ ¬ a ∈ x → x ≠ y + a ' + z; from specification list%a: ⊦ (x + y) + z = x + y + z; from specification list%c: ⊦ a + x = a ' + x; from specification list