| ⊦ align↑(n0, m) + n1 ≤ n0 ↔ n1 = 0 ∧ is-aligned(n0, m), m = 0 |
0 ≠ m ⊦ align↑(n, m) = (n % m = 0 ⊃ n;(n / m)+1 * m)
⊦ is-aligned(n, m) ↔ n % m = 0
(n0 % m = 0 ⊃ n0;m * n0 / m + m) + n1 ≤ n0 ⊦ m = 0, n1 = 0 ∧ n0 % m = 0
Used simplifier rules: alignup-def: 0 ≠ m ⊦ align↑(n, m) = (n % m = 0 ⊃ n;(n / m)+1 * m);%is-aligned-def: ⊦ is-aligned(n, m) ↔ n % m = 0;% ⊦ m ≤ m; (s)% ⊦ n + 0 = n; (s)%mult-c: ⊦ m * n = n * m; from specification nat-mult%mult-a: ⊦ m0 * m * n = (m0 * m) * n; from specification nat-mult%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ m * (n + 1) = m * n + m; (s)% ⊦ m +1 = m + 1; (s)