| i = i1 * i0 + j0 ∧ 0 ≤ j0 ∧ j0 < i0, i1 + j / i0 < i0, i1 + j / i0 < i + j, 0 ≤ i + j, i1 + j / i0 < 0, 0 < i0, (i1 + j / i0) + 1 < i0, 0 ≤ i, i1 + j / i0 < i ⊦ |
j / i0 < i0, j / i0 < j0, j / i0 < (i1 * i0 + j0) + j, j / i0 < i1, j / i0 < 0, i1 + j / i0 < i0, i1 + j / i0 < i1 * i0 + j0, 0 ≤ j0, j0 < i0, 0 ≤ (i1 * i0 + j0) + j, i1 + j / i0 < 0, (i1 + j / i0) + 1 < i0, 0 ≤ i1, 0 < i0, i1 + j / i0 < j0, i1 + j / i0 < (i1 * i0 + j0) + j, j / i0 + 1 < i0 ⊦
Used simplifier rules: ls: ⊦ i + j < j ↔ i < 0; from specification int-basic2%succ-01: ⊦ i +1 = i + 1; from specification int-basic2%forward-lels: ⊦ i ≤ j ∧ j < j0 → i < j0; (forward) from specification int-abs%forward-lsle: ⊦ i < j ∧ j ≤ j0 → i < j0; (forward) from specification int-abs%trans: ⊦ i < j ∧ j < j0 → i < j0; (forward) from specification int-basic1%lf-01: ⊦ i < j ∧ j < i0 → i +1 < i0; (forward) from specification int-basic1%add-c: ⊦ i + j = j + i; from specification int-basic2%add-a: ⊦ i + j + i0 = (i + j) + i0; from specification int-basic2%commutativity: ⊦ i * j = j * i; from specification int-mult%associativity: ⊦ i * j * j0 = (i * j) * j0; from specification int-mult%zero-ge-add: ⊦ 0 ≤ j1 ∧ j1 < j → (0 ≤ i0 * j + j1 ↔ 0 ≤ i0); from specification int-mult