proposition: Lemma finset_cardinal_le: forall x y, finset_le x y -> (finset_cardinal x <= finset_cardinal y)%nat.
proof: Proof. intros. apply ISProp.subset_cardinal. apply H. Qed.
imports: Coq(ZArith Psatz Bool String Program.Equality FSets Wellfounded) CDF(Sequences IMP Simulation) CDF(Fixpoints)