Used simplifier rules: le-def: ⊦ i ≤ j ↔ ¬ j < i;%sub-le: ⊦ i - j ≤ i0 ↔ i ≤ j + i0;%add-c: ⊦ i + j = j + i; from specification int-basic2