type Seq T; function Seq#Length(Seq T) returns (int); function Seq#Empty() returns (Seq T); axiom (forall :: Seq#Length(Seq#Empty(): Seq T) == 0);