type Set predicate SubSet(Set s1, Set s2)