| s.min < a, s.min ∈ s, s.max ∈ s ⊦ s = ∅, (s ++ a) -- (s ++ a).min = (s -- s.min) ++ a, # s = 0 |
⊦ a ∈ s ∧ ¬ b < a → (s ++ b).min = s.min
s.min ∈ s ∧ ¬ a < s.min, s.min < a, s.min ∈ s, s.max ∈ s ⊦ s = ∅, (s ++ a) -- s.min = (s -- s.min) ++ a, # s = 0
Used simplifier rules: min-insert: ⊦ a < s.min ∧ s ≠ ∅ → (s ++ a).min = a;%del-addeq-05: ⊦ (s ++ a) -- a = s -- a; from specification set-union%del-neq-02: ⊦ s -- a ≠ s0 ++ a; from specification set-union%transitivity: ⊦ a < b ∧ b < c → a < c; (forward) from specification oelem%irreflexivity: ⊦ ¬ a < a; from specification oelem Used terms: s.min, s, a