| j = i1 * 2 + j0, j0 = 0, i0 < 0, j0 < 2, 0 < 2, ~1 ≤ i0 + j, 0 ≤ j0, 0 ≤ j ⊦ ((i0 + 1) + j) / 2 = i0 / 2 + i1 |
i0 < 0, ~1 ≤ i0 + i1 * 2, 0 ≤ i1 ⊦ (1 + i0 + i1 * 2) / 2 = i0 / 2 + i1
Used simplifier rules: ⊦ i < 0 ∧ 0 ≤ j → i < j; (s)%forward-lsle: ⊦ i < j ∧ j ≤ j0 → i < j0; (forward) from specification int-abs%forward-le-01: ⊦ i ≤ j ∧ 0 ≤ i → 0 ≤ j; (forward) from specification int-abs%commutativity: ⊦ i * j = j * i; from specification int-mult%associativity: ⊦ i * j * j0 = (i * j) * j0; from specification int-mult% ⊦ 0 < i → (0 ≤ i * j ↔ 0 ≤ j); (s)% ⊦ i + 0 = i; (s)%add-c: ⊦ i + j = j + i; from specification int-basic2%add-a: ⊦ i + j + i0 = (i + j) + i0; from specification int-basic2