| 0 ≤ i, 0 ≤ j0, 0 ≤ j, 0 ≤ i0, j0 ≤ j, i0 ≤ i, i ≤ i + 2 * i0, 2 * i + 2 ≤ 2 * i0, i0 ≤ i + 2 * i0, 0 ≤ i + 2 * i0 ⊦ i = j ∧ i0 = j0 |
0 ≤ i + 2 * i0, i0 ≤ i + 2 * i0, 2 * i + 2 ≤ 2 * i0, i ≤ i + 2 * i0, i0 ≤ i, j0 ≤ j, 0 ≤ i0, 0 ≤ j, 0 ≤ j0, 0 ≤ i, 2 * (i + 1) ≤ 2 * i0 ⊦ i = j ∧ i0 = j0
Used simplifier rules: dist-lsplit: ⊦ (i + i0) * j = i * j + i0 * j;%associativity: ⊦ i * j * j0 = (i * j) * j0;%commutativity: ⊦ i * j = j * i;%add-a: ⊦ i + j + i0 = (i + j) + i0; from specification int-basic2%add-c: ⊦ i + j = j + i; from specification int-basic2% ⊦ i ≤ j ↔ ¬ j < i; (ss)% ⊦ i ≤ j → (j < i ↔ false); (as) Used formulas: 2 * (i + 1) ≤ 2 * i0