| # st0 < # st1[a, d], st1[a, d] ⊆ st0, ∀ st0. # st0 < # st1 → ¬ st1 ⊆ st0 ⊦ a ∈ st1, st1[a, d] = ∅ |
st1[a, d] ⊆ st0, # st0 ≤ # st1, ∀ st0. # st0 < # st1 → ¬ st1 ⊆ st0 ⊦ st1[a, d] = ∅, a ∈ st1
Used simplifier rules: Size-insert: ⊦ ¬ a ∈ st → # st[a, d] = # st + 1;%lels: ⊦ ¬ m < n ↔ n ≤ m; from specification nat%c: ⊦ m + n = n + m; from specification nat-basic2%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic2%s: ⊦ m < n + 1 ↔ ¬ n < m; from specification nat-basic2