| (i1 * j + j0) + 1 = i0 * j + j1, j1 < j, j0 < j, 1 < j, 0 < j, 0 < j1, 0 ≤ j0, 0 ≤ i1, ~1 ≤ i1 * j + j0, j ≤ j0 + 1 ⊦ j1 = 0, (i1 + 1) * (j0 + 1) = i0 * (j0 + 1) + j1 ∧ j1 ≤ j0 |
Used simplifier rules: ⊦ i < j → (j ≤ i + 1 ↔ j = i + 1); (s)%add-a: ⊦ i + j + i0 = (i + j) + i0; from specification int-basic2%add-c: ⊦ i + j = j + i; from specification int-basic2% ⊦ i * j + i = i * (j + 1); (s)%associativity: ⊦ i * j * j0 = (i * j) * j0; from specification int-mult%commutativity: ⊦ i * j = j * i; from specification int-mult% ⊦ (* j) < i0 + (* j0) ↔ j - j0 < i0; (s)% ⊦ ~1 < i ↔ 0 ≤ i; (s)% ⊦ i ≤ 0 ∧ 0 ≤ j → i ≤ j; (s)% ⊦ i < j + 1 ↔ i ≤ j; (s)