theorem Th15:
  emp s1 & emp s2 implies s1 == s2
  proof
    assume emp s1 & emp s2; then
    |.s1.| = {} & |.s2.| = {} by Th5;
    hence |.s1.| = |.s2.|;
  end;
