Used simplifier rules: del-01: ⊦ a ∈ st.keys → (st -- a).keys = st.keys -- a;%del-size: ⊦ a ∈ s → #(s -- a) = # s - 1; from specification set-union