| a ∈ s0, a0 ∈ s0, ∀ a0. a0 ∈ s ++ a → a0 ∈ s0 ⊦ a1 ∈ s → a1 ∈ s0, #(s0 \ s) - 1 = # s0 - # s + 1, a ∈ s |
a0 ∈ s0, a ∈ s0, a1 ∈ s, ∀ a2. a2 ∈ s → a2 ∈ s0 ⊦ s = ∅, #(s0 \ s) - 1 = # s0 - # s + 1, # s = 0, a ∈ s, a1 ∈ s0
Used simplifier rules: size-zero-01: ⊦ s ≠ ∅ → # s ≠ 0; (forward) from specification set-basic%ne-01: ⊦ a ∈ s → s ≠ ∅; (forward) from specification set-basic%rax: ⊦ a ∈ s ++ b ↔ ¬ ¬(a = b ∨ a ∈ s); from specification set-basic