Used simplifier rules: in-01-01: ⊦ a ∈ y → (a ∈ filter(x, y) ↔ a ∈ x);%rm-in-02: ⊦ a ∈ rmdup(x) ↔ a ∈ x; from specification list-dup