| 8 * 2 ^ i1 * 2 < 8 + i1, 0 ≤ i1, i1 + 7 ≤ 8 * 2 ^ i1, ∀ i0. i→n(i0) < i→n(i1 + 1) → 8 * 2 ^ i0 < i0 + 7 ∧ 0 ≤ i0 → false ⊦ |
8 * 2 ^ i1 * 2 < 8 + i1, i1 + 7 ≤ 8 * 2 ^ i1, 0 ≤ i1, 2 * (i1 + 7) ≤ 2 * 8 * 2 ^ i1, ∀ i0. i→n(i0) < i→n(i1 + 1) → 8 * 2 ^ i0 < i0 + 7 ∧ 0 ≤ i0 → false ⊦
Used simplifier rules: associativity: ⊦ i * j * j0 = (i * j) * j0; from specification int-mult%commutativity: ⊦ i * j = j * i; from specification int-mult%0 < i, i < j, j % i = 0 ⊦ (* i) * i0 ≤ (* j) * j0 ↔ i0 ≤ j / i * j0; (s)% ⊦ i ≤ j ↔ ¬ j < i; (ss)% ⊦ i ≤ j → ¬ j < i; (s) Used formulas: 2 * (i1 + 7) ≤ 2 * 8 * 2 ^ i1