| i1 * 2 + 7 * 2 < 8 + i1, 8 * 2 ^ i1 * 2 < 8 + i1, i1 + 7 ≤ 8 * 2 ^ i1, 0 ≤ i1, i1 * 2 + 7 * 2 ≤ 16 * 2 ^ i1, ∀ i0. i→n(i0) < i→n(i1 + 1) → 8 * 2 ^ i0 < i0 + 7 ∧ 0 ≤ i0 → false ⊦ |
8 * 2 ^ i1 * 2 < 8 + i1, i1 * 2 + 6 < i1, i1 * 2 + 14 ≤ 16 * 2 ^ i1, 0 ≤ i1, i1 + 7 ≤ 8 * 2 ^ i1, ∀ i0. i→n(i0) < i→n(i1 + 1) → 8 * 2 ^ i0 < i0 + 7 ∧ 0 ≤ i0 → false ⊦
Used simplifier rules: ⊦ i < j - i0 ↔ i + i0 < j; (s)%add-c: ⊦ i + j = j + i; from specification int-basic2%add-a: ⊦ i + j + i0 = (i + j) + i0; from specification int-basic2%i < 0 ⊦ (* i) + j = j - ~ i; (s)% ⊦ i + (* j) < i0 + (* j0) ↔ i < i0 + (j0 - j); (s)