| #(s0 \ s) = # s0 - # s, a ∈ s0, a0 ∈ s0, ∀ a0. a0 ∈ s ++ a → a0 ∈ s0 ⊦ # s ≤ # s0, # s0 - # s - 1 = # s0 - # s + 1, a ∈ s |
#(s0 \ s) = # s0 - # s, # s0 < # s, a0 ∈ s0, a ∈ s0, ∀ a0. a0 ∈ s ++ a → a0 ∈ s0 ⊦ # s0 - # s - 1 = # s0 - # s + 1, a ∈ s
Used simplifier rules: f: ⊦ m < n → n ≠ 0; from specification nat-basic1%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic1%lels-01: ⊦ ¬ m ≤ n ↔ n < m; from specification nat