| i1 = i2 + 1, i + i2 * i = i1 * i, 0 < i, 0 ≤ i1, 0 ≤ j0, j0 < i, ~1 ≤ i2 * i + j0, 0 ≤ i + i2 * i + j0 ⊦ i2 * i + j0 < i * i0 ↔ i1 ≤ i0 |
0 ≤ j0, j0 < i, ~1 ≤ i2 * i + j0, 0 < i, ~1 ≤ i2, 0 ≤ i + i2 * i + j0 ⊦ i2 * i + j0 < i * i0 ↔ i2 < i0
Used simplifier rules: forward-le-01: ⊦ i ≤ j ∧ 0 ≤ i → 0 ≤ j; (forward) from specification int-abs%numle-02: ⊦ (* j) ≤ i0 + (* j0) ↔ j - j0 ≤ i0; from specification int-abs%succ-01: ⊦ i + 1 ≤ j ↔ i < j; from specification int-abs%add-c: ⊦ i + j = j + i; from specification int-basic2%add-a: ⊦ i + j + i0 = (i + j) + i0; from specification int-basic2%commutativity: ⊦ i * j = j * i; from specification int-mult%associativity: ⊦ i * j * j0 = (i * j) * j0; from specification int-mult%one: ⊦ 1 * i = i; from specification int-mult%eq-dist: ⊦ (i + j) * i0 = j0 + j * i0 ↔ i * i0 = j0; from specification int-mult