Used simplifier rules: sub-size-01: ⊦ x ⊆ y ∧ ¬ dups(x) → (# y < # x ↔ false);%lels-01: ⊦ ¬ m ≤ n ↔ n < m; from specification nat