theorem Th7:
  not emp s implies |.pop s.| = Del(|.s.|,1)
  proof
    assume not emp s; then
    |.s.| = <*top s*>^|.pop s.| by Th6;
    hence thesis by WSIERP_1:40;
  end;
