| i + j - 1 = i1 * i + j0 ∧ 0 ≤ j0 ∧ j0 < i ∧ 0 ≤ i + j - 1, j ≤ i * i0, 0 ≤ j, 0 < i, i0 < i1, 0 ≤ i0, 0 < i1 ⊦ |
i + j = (i1 * i + j0) + 1, 0 < i + j, 0 ≤ j0, 0 < i1, j0 < i, 0 ≤ i0, i0 < i1, 0 < i, 0 ≤ j, j ≤ i * i0, 0 ≤ i1 ⊦
Used simplifier rules: commutativity: ⊦ i * j = j * i; from specification int-mult%associativity: ⊦ i * j * j0 = (i * j) * j0; from specification int-mult%zero-ge-add: ⊦ 0 ≤ j1 ∧ j1 < j → (0 ≤ i0 * j + j1 ↔ 0 ≤ i0); from specification int-mult%mone-06: ⊦ ~1 < i ↔ 0 ≤ i; from specification int-abs%numls-02: ⊦ (* j) < i0 + (* j0) ↔ j - j0 < i0; from specification int-abs%forward-le-01: ⊦ i ≤ j ∧ 0 ≤ i → 0 ≤ j; (forward) from specification int-abs%forward-le-05: ⊦ i < j ∧ 0 ≤ i → 0 < j; (forward) from specification int-abs%lf-02: ⊦ i < j ∧ j = i0 → i < i0; (forward) from specification int-basic1%leone: ⊦ 1 ≤ i ↔ 0 < i; from specification int-abs%add-c: ⊦ i + j = j + i; from specification int-basic2%add-a: ⊦ i + j + i0 = (i + j) + i0; from specification int-basic2%sub-le-01: ⊦ i ≤ j - i0 ↔ i + i0 ≤ j; from specification int-abs%sub-eq: ⊦ i - j = i0 ↔ i = i0 + j; from specification int-abs