Used simplifier rules: oc-zero: ⊦ #oc(a, x) = 0 ↔ ¬ a ∈ x;%notin-02: ⊦ ¬ a ∈ y → ¬ a ∈ filter(x, y); from specification list-set