The last one was the trickiest, since it's "if and only if" for recognition: a recognized string must also belong to S