| i = i0 + j, i ≤ 0, j ≤ 0, i ≤ j ⊦ i→n(i0) = i→n(i) - i→n(j) |
j ≤ 0, i0 + j ≤ 0, i0 ≤ 0 ⊦ i→n(i0) = i→n(i0 + j) - i→n(j)
Used simplifier rules: add-c: ⊦ i + j = j + i; from specification int-basic2%add-a: ⊦ i + j + i0 = (i + j) + i0; from specification int-basic2% ⊦ i + j ≤ i ↔ j ≤ 0; (s)