| ∀ s0. # s1 < # s0 → (∃ a. a ∈ s0 ∧ ¬ a ∈ s1), #(s1 ++ a) < # s0 ⊦ ∃ a0. a0 ∈ s0 ∧ ¬ a0 ∈ s1 ++ a |
#(s1 ++ a) < # s0, ∀ s0. # s1 < # s0 → (∃ a. a ∈ s0 ∧ ¬ a ∈ s1) ⊦ # s0 = 0, s0 = ∅, ∃ a0. a0 ∈ s0 ∧ a0 ≠ a ∧ ¬ a0 ∈ s1
Used simplifier rules: rax: ⊦ a ∈ s ++ b ↔ ¬ ¬(a = b ∨ a ∈ s);%size-zero: ⊦ # s ≠ 0 → s ≠ ∅;%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic1