| 2 * (i1 + 7) ≤ 16 * 2 ^ i1, 16 * 2 ^ i1 < 8 + i1, 0 ≤ i1, i1 + 7 ≤ 8 * 2 ^ i1, ∀ i0. i→n(i0) < i→n(i1 + 1) → 8 * 2 ^ i0 < i0 + 7 ∧ 0 ≤ i0 → false ⊦ |
2 * (i1 + 7) < 8 + i1, 2 * (i1 + 7) ≤ 16 * 2 ^ i1, 16 * 2 ^ i1 < 8 + i1, 0 ≤ i1, i1 + 7 ≤ 8 * 2 ^ i1, ∀ i0. i→n(i0) < i→n(i1 + 1) → 8 * 2 ^ i0 < i0 + 7 ∧ 0 ≤ i0 → false ⊦
Used simplifier rules: nummult-modle: 0 < i, i < j, j % i = 0 ⊦ (* i) * i0 ≤ (* j) * j0 ↔ i0 ≤ j / i * j0; from specification int-div%associativity: ⊦ i * j * j0 = (i * j) * j0; from specification int-mult%commutativity: ⊦ i * j = j * i; from specification int-mult%lels: ⊦ ¬ i < j ↔ j ≤ i; from specification int-abs%forward-lsle: ⊦ i < j ∧ j ≤ j0 → i < j0; (forward) from specification int-abs%nummult-modls-01: 0 < j, j < i, i % j = 0 ⊦ (* i) * i0 < (* j) * j0 ↔ i / j * i0 < j0; from specification int-div%lenls: ⊦ i ≤ j → ¬ j < i; from specification int-abs Used formulas: 2 * (i1 + 7) < 8 + i1