fact: Definition treeify_rb_invariant size depth (f:treeify_t) := forall acc, size <= length acc -> rbt depth (fst (f acc)) /\ size + length (snd (f acc)) = length acc.
imports: Bool List BinPos Pnat Setoid SetoidList PeanoNat