Used simplifier rules: insert-03: ⊦ st[a, d].keys = st.keys ++ a;%inkeys-01: ⊦ a ∈ st → (¬ a ∈ st.keys ↔ false);%eq-03: ⊦ s ++ a = s ↔ a ∈ s; from specification set-basic