| 2 * (j0 + i0 * j) = i1 * j + j1, j1 < 2 * j0, j0 < j, 1 + 2 * i0 < i1, j1 < j, 1 < j, 0 < j, 0 < j0, j ≤ 2 * j0, 0 ≤ i0, 0 ≤ j0, 0 ≤ j1, 0 ≤ i1 ⊦ |
2 * (j0 + i0 * j) = i1 * j + j1, 2 * (j0 + i0 * j) = (2 * i0 + 1) * j + (2 * j0 - j), 0 < j0, 0 < j, 1 < j, j1 < j, 1 + 2 * i0 < i1, j0 < j, j1 < 2 * j0, 0 ≤ i1, 0 ≤ j1, 0 ≤ j0, 0 ≤ i0, j ≤ 2 * j0 ⊦
Used simplifier rules: ⊦ i + (j - i0) = i + j - i0; (s)%add-a: ⊦ i + j + i0 = (i + j) + i0; from specification int-basic2%add-c: ⊦ i + j = j + i; from specification int-basic2% ⊦ i - j = i0 ↔ i = i0 + j; (s)% ⊦ i * (i0 + 1) + j = i + j0 ↔ i * i0 + j = j0; (s)% ⊦ i * j + i * j0 = i * (j + j0); (s)%associativity: ⊦ i * j * j0 = (i * j) * j0; from specification int-mult%commutativity: ⊦ i * j = j * i; from specification int-mult% ⊦ 0 < i → (i * j = i * j0 ↔ j = j0); (s) Used formulas: 2 * (j0 + i0 * j) = (2 * i0 + 1) * j + (2 * j0 - j)