| j0 + j = ~1, j * i0 + i0 ≤ i + j * i + j0, 0 ≤ j + j2, j < 0, j * i0 ≤ j * i + j0, i0 < i, 0 ≤ j0, 0 < j2, j0 < j2, ∀ j, i, i0, j0. abs(j) < j2 → abs(j) * i ≤ abs(j) * i0 + j0 ∧ 0 ≤ j0 ∧ j0 < abs(j) → i ≤ i0 ⊦ j = 0 |
j = ~1 - j0, j0 + j = ~1, j * i0 + i0 ≤ i + j * i + j0, 0 ≤ j + j2, j < 0, j * i0 ≤ j * i + j0, i0 < i, 0 ≤ j0, 0 < j2, j0 < j2, ∀ j, i, i0, j0. abs(j) < j2 → abs(j) * i ≤ abs(j) * i0 + j0 ∧ 0 ≤ j0 ∧ j0 < abs(j) → i ≤ i0 ⊦ j = 0
Used simplifier rules: sub-eq: ⊦ i - j = i0 ↔ i = i0 + j; from specification int-abs%add-c: ⊦ i + j = j + i; from specification int-basic2 Used formulas: j = ~1 - j0