| i0 = i3 * j + j1, j0 < j, 0 < j, j1 < j, 0 ≤ i2, 0 ≤ j0, 0 ≤ i1, 0 ≤ i0, 0 ≤ j1, 0 ≤ i3 ⊦ ((i2 * j + j0) + i0 + i1) / j = i2 + i3 + i1 / j + (j0 + j1 + i1 % j) / j |
j0 < j, 0 < j, j1 < j, 0 ≤ i2, 0 ≤ j0, 0 ≤ i1, 0 ≤ j1, 0 ≤ i3 ⊦ (j * (i3 + i2) + j0 + j1 + i1) / j = i2 + i3 + i1 / j + (j0 + j1 + i1 % j) / j
Used simplifier rules: forward-le-01: ⊦ i ≤ j ∧ 0 ≤ i → 0 ≤ j; (forward) from specification int-abs% ⊦ i ≤ 0 ∧ 0 ≤ j → i ≤ j; (s)% ⊦ 0 ≤ j1 ∧ j1 < j → (0 ≤ i0 * j + j1 ↔ 0 ≤ i0); (s)%add-c: ⊦ i + j = j + i; from specification int-basic2%add-a: ⊦ i + j + i0 = (i + j) + i0; from specification int-basic2%commutativity: ⊦ i * j = j * i; from specification int-mult%associativity: ⊦ i * j * j0 = (i * j) * j0; from specification int-mult% ⊦ i * j + i * j0 = i * (j + j0); (s)