Informal description
For any multiset $s$ over a type $\alpha$ and a decidable predicate $p$ on $\alpha$, the filtered multiset of the attached multiset (where each element is paired with a proof of its membership in $s$) under $p$ is equal to the attached multiset of the filtered multiset $s$ under $p$, mapped via the inclusion function that preserves membership proofs.
More precisely, let $\text{attach}(s) = \{(a, h) \mid a \in s, h : a \in s\}$ be the multiset of pairs where each element $a$ is paired with a proof $h$ of its membership in $s$. Then:
\[
\text{filter}\, p\, (\text{attach}(s)) = \text{map}\, (\text{Subtype.map}\, \text{id}\, (\lambda \_, \text{mem\_of\_mem\_filter}))\, (\text{attach}(\text{filter}\, p\, s)),
\]
where $\text{Subtype.map}\, \text{id}\, (\lambda \_, \text{mem\_of\_mem\_filter})$ is the function that maps an element $(a, h)$ of $\text{attach}(\text{filter}\, p\, s)$ to $(a, h')$, where $h'$ is a proof that $a \in s$ derived from $h : a \in \text{filter}\, p\, s$.