| i + j = (i1 * i + j0) + 1, j = (i1 - 1) * i + j0 + 1, 0 < i + j, 0 < i, j0 < i, 0 ≤ j0, 0 ≤ j ⊦ j ≤ i * i0 ↔ i1 ≤ i0 |
i + (i1 - 1) * i = i1 * i, j0 < i, 0 < i, ~1 ≤ (i1 - 1) * i + j0, 0 ≤ j0, 0 ≤ i + (i1 - 1) * i + j0 ⊦ (i1 - 1) * i + j0 < i * i0 ↔ i1 ≤ i0
Used simplifier rules: forward-le-01: ⊦ i ≤ j ∧ 0 ≤ i → 0 ≤ j; (forward) from specification int-abs% ⊦ ~1 < i ↔ 0 ≤ i; (s)% ⊦ (* j) < i0 + (* j0) ↔ j - j0 < i0; (s)% ⊦ (* j) ≤ i0 + (* j0) ↔ j - j0 ≤ i0; (s)% ⊦ i + 1 ≤ j ↔ i < j; (s)%add-c: ⊦ i + j = j + i; from specification int-basic2%add-a: ⊦ i + j + i0 = (i + j) + i0; from specification int-basic2% ⊦ i + j = i + i0 ↔ j = i0; (s)