Used simplifier rules: butlast-last: x ≠ [] ⊦ x.butlast + x.last ' = x;%a: ⊦ (x + y) + z = x + y + z; from specification list