| a < s.max, s.min ∈ s, s.max ∈ s ⊦ (s ++ a).max = s.max, s = ∅, # s = 0 |
a ∈ s, ∀ b. b ∈ s → ¬ a < b ⊦ s.max = a
Used simplifier rules: max-gr: ⊦ s.max < a ∧ s ≠ ∅ → ¬ a ∈ s;%in: ⊦ a ∈ s → a ∈ s ++ b; from specification set-basic%rax: ⊦ a ∈ s ++ b ↔ ¬ ¬(a = b ∨ a ∈ s); from specification set-basic%transitivity: ⊦ a < b ∧ b < c → a < c; (forward) from specification oelem%lel: ⊦ a < b ∧ a = c → c < b; (forward) from specification oelem%irreflexivity: ⊦ ¬ a < a; from specification oelem Used terms: s.max, s ++ a