∀ a. a ∈ s1 → a ∈ s0 ⊦ #(s0 \ s1) = # s0 - # s1
Used simplifier rules: Subset: ⊦ s1 ⊆ s2 ↔ (∀ a. a ∈ s1 → a ∈ s2); from specification set-basic