| 16 = # int2bits(j0).rest, # int2bits(j0) = 17, i0 < 0, i0 * 65536 + j0 < 0, ~65536 < j0, i0 * 65536 + j0 < ~32768, j0 < ~32768, j0 < 0, 16 ≤ # int2bits(j0).rest ⊦ s2i(i2s(bits2int(int2bits(j0).rest))) = j0 + 65536, j0 = 0, int2bits(j0).rest = [] |
# int2bits(j0) = 17, 16 = # int2bits(j0).rest, j0 < 0, j0 < ~32768, i0 * 65536 + j0 < ~32768, ~65536 < j0, i0 * 65536 + j0 < 0, i0 < 0 ⊦ int2bits(j0).rest = [], j0 = 0, s2i(i2s(bits2int(int2bits(j0).rest))) = j0 + 65536
Used simplifier rules: not-zero: 0 < n ⊦ (* n) ≤ m → m ≠ 0; (forward) from specification nat%add-c: ⊦ i + j = j + i; from specification int-basic2%add-a: ⊦ i + j + i0 = (i + j) + i0; from specification int-basic2%commutativity: ⊦ i * j = j * i; from specification int-mult