| (i1 * j + j0) + 1 = i0 * j + j1, 0 < j1, 0 < j, 1 < j, j0 < j, j1 < j, ~1 ≤ i1 * j + j0, 0 ≤ i1, 0 ≤ j0 ⊦ j1 = 0, j1 = j0 + 1, i1 * j + j0 + 1 = i0 * j + j1 ∧ 0 ≤ j0 + 1 ∧ j0 + 1 < j ∧ 0 ≤ j1 |
(i1 * j + j0) + 1 = i0 * j + j1, j1 < j, j0 < j, 1 < j, 0 < j, 0 < j1, 0 ≤ j0, 0 ≤ i1, ~1 ≤ i1 * j + j0, j ≤ j0 + 1 ⊦ j1 = 0
Used simplifier rules: ⊦ i < j ↔ ¬ j ≤ i; (ss)% ⊦ i ≠ j → (i ≤ j ↔ i < j); (s)%i0 ≠ 0, i0 ≤ i ⊦ (* i) ≤ j → (* i0) ≤ j; (s)% ⊦ (* j) ≤ i0 + (* j0) ↔ j - j0 ≤ i0; (s)%add-c: ⊦ i + j = j + i; from specification int-basic2%add-a: ⊦ i + j + i0 = (i + j) + i0; from specification int-basic2