pub proof fn lemma_set_prop_mutual_exclusion<A>(s: Set<A>, f: FnSpec<(A,), bool>)Expand description
requires
s.finite(),ensuresset_prop_mutual_exclusion(s, f) <==> s.filter(f).len() <= 1,