| s.min ∈ s ∧ ¬ a < s.min, s.min < a, s.min ∈ s, s.max ∈ s ⊦ s = ∅, (s ++ a) -- s.min = (s -- s.min) ++ a, # s = 0 |
s.min < a, s.min ∈ s, s.max ∈ s ⊦ s = ∅, (s ++ a) -- s.min = (s -- s.min) ++ a, # s = 0
Used simplifier rules: ls-le: ⊦ a < b → (¬ b < a ↔ true); from specification oelem