| 0 ≤ b2i(int2bytes(bytes2int(by0 ' + bytes)).first), 0 ≤ b2i(by0), # int2bytes(bytes2int(by0 ' + bytes)) < 2 + # bytes, ∀ bytes0. # bytes0 < #(i2b(0) + by0 + bytes) → true → bytes0 = [] ∨ fix(# bytes0, int2bytes(bytes2int(bytes0))) = bytes0 ⊦ fix(1 + # bytes, int2bytes(bytes2int(by0 ' + bytes))) = by0 ' + bytes |
Used simplifier rules: ⊦ by ' ≠ [];% ⊦ ¬ bytes + bytes0 ≠ [] ↔ bytes = [] ∧ bytes0 = [];% ⊦ #(bytes + bytes0) = # bytes + # bytes0;% ⊦ # by ' = 0 +1;% ⊦ (bytes + bytes0) + bytes1 = bytes + bytes0 + bytes1;% ⊦ by + bytes = by ' + bytes;% ⊦ m + n < m + n0 ↔ n < n0;% ⊦ (m + n0) + n1 = m + n0 + n1;% ⊦ m + n = n + m; Used terms: by0 ' + bytes