| (i0 + j0) * (i0 + j0 + 1) = i1 * 2 + j1, (i + j) * (i + j + 1) = (i1 + (j0 - j)) * 2 + j2, j1 < 2, j2 < 2, 0 ≤ i1, 0 ≤ j1, 0 ≤ j0, 0 ≤ i0, 0 ≤ j, 0 ≤ i, 0 ≤ j2, 0 ≤ i1 + (j0 - j) ⊦ i = i0 ∧ j = j0 |
(i0 + j0) * (i0 + j0 + 1) = i1 * 2 + j1, (i + j) * (i + j + 1) = (i1 + j0 - j) * 2 + j2, j2 < 2, j1 < 2, 0 ≤ j2, 0 ≤ i, 0 ≤ j, 0 ≤ i0, 0 ≤ j0, 0 ≤ j1, 0 ≤ i1, j ≤ i1 + j0, 0 ≤ i1 + j0 ⊦ i = i0 ∧ j = j0
Used simplifier rules: forward-le-01: ⊦ i ≤ j ∧ 0 ≤ i → 0 ≤ j; (forward) from specification int-abs% ⊦ i + 0 = i; (s)% ⊦ i ≤ j - i0 ↔ i + i0 ≤ j; (s)%add-c: ⊦ i + j = j + i; from specification int-basic2%add-a: ⊦ i + j + i0 = (i + j) + i0; from specification int-basic2% ⊦ i + (j - i0) = i + j - i0; (s)