Used simplifier rules: perm-def: ⊦ perm(x, y) ↔ ¬ ¬(x ⊆m y ∧ y ⊆m x);%subapp-01: ⊦ x ⊆m x0 ∧ y ⊆m y0 → y + x ⊆m x0 + y0;%a: ⊦ (x + y) + z = x + y + z; from specification list