proposition: Lemma opair_inj x x' y y' : M_opair x y = M_opair x' y' -> x = x' /\ y = y'.
proof: Proof. Proof using VIEQ M_ZF. intros H. split. - eapply opair_inj1; eassumption. - eapply opair_inj2; eassumption. Qed.
imports: Undecidability.FOL(Syntax.Facts Semantics.Tarski.FullFacts ZF) Undecidability.FOL.Sets(ZF binZF) Undecidability.FOL.Sets.Models(Aczel Aczel_CE Aczel_TD) Coq(Lia)