End lt_spec.
#[global]
Instance lt_strorder : StrictOrder lt.
Local Instance compare_compat_1 : Proper (eq==>Logic.eq==>Logic.eq) compare.
#[global]
Instance compare_compat : Proper (eq==>eq==>Logic.eq) compare.
Local Instance lt_compat : Proper (eq==>eq==>iff) lt.
(** Specification of [add] *)

(** Specification of [diff] *)
Lemma diff_spec: forall s s' x, In x (diff s s') <-> In x s /\ ~ In x s'.