| (i0 + j0) * (i0 + j0 + 1) = i1 * 2 + j1, (i + j) * (i + j + 1) = i2 * 2 + j2, i2 + j = i1 + j0, j1 < 2, j2 < 2, 0 < 2, 0 ≤ i1, 0 ≤ j1, 0 ≤ j0, 0 ≤ i0, 0 ≤ j, 0 ≤ i, 0 ≤ j2, 0 ≤ i2, 0 ≤ (i + j) * (i + j + 1) ⊦ i = i0 ∧ j = j0 |
(i0 + j0) * (i0 + j0 + 1) = i1 * 2 + j1, (i + j) * (i + j + 1) = i2 * 2 + j2, i2 + j = i1 + j0, j1 < 2, j2 < 2, 0 ≤ i1, 0 ≤ j1, 0 ≤ j0, 0 ≤ i0, 0 ≤ j, 0 ≤ i, 0 ≤ j2, 0 ≤ i2 ⊦ i = i0 ∧ j = j0
Used simplifier rules: add-c: ⊦ i + j = j + i; from specification int-basic2%add-a: ⊦ i + j + i0 = (i + j) + i0; from specification int-basic2%commutativity: ⊦ i * j = j * i; from specification int-mult%associativity: ⊦ i * j * j0 = (i * j) * j0; from specification int-mult% ⊦ 0 ≤ j1 ∧ j1 < j → (0 ≤ i0 * j + j1 ↔ 0 ≤ i0); (s)% ⊦ i ≤ 0 ∧ 0 ≤ j → i ≤ j; (s)%forward-le-01: ⊦ i ≤ j ∧ 0 ≤ i → 0 ≤ j; (forward) from specification int-abs