Used simplifier rules: subset-size: ⊦ # st0 < # st → ¬ st ⊆ st0;%lels-01: ⊦ ¬ m ≤ n ↔ n < m; from specification nat