Used simplifier rules: Butmax: ⊦ s ≠ ∅ → s.butmax = s -- s.max;%Delete: ⊦ a ∈ s -- b ↔ a ≠ b ∧ a ∈ s; from specification set-union