theorem
  FirstNotIn L = intloc m & not intloc n in L implies m <= n by SCMFSA_M:15;
