| ∃ a. a ∈ s ∧ ¬ a ∈ s0, #(s0 \ s) = # s0 - # s, # s0 < # s, a0 ∈ s0, a ∈ s0, ∀ a0. a0 ∈ s ++ a → a0 ∈ s0 ⊦ # s0 - # s - 1 = # s0 - # s + 1, a ∈ s |
#(s0 \ s) = # s0 - # s, a ∈ s0, a0 ∈ s0, # s0 < # s, a1 ∈ s, a2 ∈ s, ∀ a0. a0 ∈ s ++ a → a0 ∈ s0 ⊦ # s0 - # s - 1 = # s0 - # s + 1, a1 ∈ s0, a ∈ s
Used simplifier rules: In-empty: ⊦ ¬ a ∈ ∅; from specification set-basic%Extension: ⊦ s1 = s2 ↔ (∀ a. a ∈ s1 ↔ a ∈ s2); from specification set-basic%ne-01: ⊦ a ∈ s → s ≠ ∅; (forward) from specification set-basic