Used simplifier rules: Butmin: ⊦ st.butmin = st -- st.min;%Del-in: ⊦ a ∈ st -- b ↔ a ≠ b ∧ a ∈ st; from specification store