Used simplifier rules: Butmin: ⊦ st.butmin = st -- st.min;%Del-at: ⊦ a ≠ b → (st -- b)[a] = st[a]; from specification store