| ∀ s0. # s0 + # s1 < #(s0 ∩ s1) → #(s0 ∩ s1) = 0 ∨ s0 ∩ s1 = ∅, # s0 + #(s1 ++ a) < #(s0 ∩ (s1 ++ a)) ⊦ #(s0 ∩ (s1 ++ a)) = 0, s0 ∩ (s1 ++ a) = ∅ |
# s0 + #(s1 ++ a) < #(s0 ∩ (s1 ++ a)), ∀ s0. # s0 + # s1 < #(s0 ∩ s1) → #(s0 ∩ s1) = 0 ∨ s0 ∩ s1 = ∅ ⊦ #(s0 ∩ (s1 ++ a)) = 0, s0 ∩ (s1 ++ a) = ∅
Used simplifier rules: size-zero: ⊦ # s ≠ 0 → s ≠ ∅; (forward) from specification set-basic%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic1