| b ∈ s, 2 < # s, a ∈ s ⊦ #(∅ ++ a ++ b) < # s, # s = 0, b = a, ∃ a, b, c. a ∈ s ∧ b ∈ s ∧ c ∈ s ∧ a ≠ b ∧ a ≠ c ∧ b ≠ c |
2 < #(∅ ++ a ++ b), # s ≤ #(∅ ++ a ++ b), a ∈ s, 2 < # s, b ∈ s ⊦ b = a, # s = 0, #(∅ ++ a ++ b) = 0, ∃ a, b, c. a ∈ s ∧ b ∈ s ∧ c ∈ s ∧ a ≠ b ∧ a ≠ c ∧ b ≠ c
Used simplifier rules: size-zero: ⊦ # s ≠ 0 → s ≠ ∅;%ne: ⊦ ∅ ≠ s ++ a;%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic1%fle: ⊦ m < n ∧ n ≤ n0 → m < n0; (forward) from specification nat%lels: ⊦ ¬ m < n ↔ n ≤ m; from specification nat