| (j * j + j) + 2 * j0 < 3 * i + i * i + 2, i * i < 2 * i + i * i + 2, 0 ≤ j, 2 * j + 2 ≤ 2 * j0, i * i + i ≤ (j * j + j) + 2 * j0, j0 ≤ j, 0 ≤ i, 0 ≤ j0 ⊦ |
i * i < 2 * i + i * i + 2, (j * j + j) + 2 * j0 < 3 * i + i * i + 2, 0 ≤ j0, 0 ≤ i, j0 ≤ j, i * i + i ≤ (j * j + j) + 2 * j0, 2 * j + 2 ≤ 2 * j0, 0 ≤ j, 2 * (j + 1) ≤ 2 * j0 ⊦
Used simplifier rules: dist-lsplit: ⊦ (i + i0) * j = i * j + i0 * j;%associativity: ⊦ i * j * j0 = (i * j) * j0;%commutativity: ⊦ i * j = j * i;%add-a: ⊦ i + j + i0 = (i + j) + i0; from specification int-basic2%add-c: ⊦ i + j = j + i; from specification int-basic2% ⊦ i ≤ j ↔ ¬ j < i; (ss)% ⊦ i ≤ j → (j < i ↔ false); (as) Used formulas: 2 * (j + 1) ≤ 2 * j0