| 1 + # bytes1 < # int2bytes(bytes2int(i2b(0) ' + bytes1)), ∀ bytes0. # bytes0 < #(i2b(0) + bytes1) → # bytes0 < # int2bytes(bytes2int(bytes0)) → bytes0 = [] ⊦ |
1 < # bytes, b2i(bytes.first) = 0, b2i(bytes.rest.first) < 0 ⊦ int2bytes(bytes2int(bytes)) = bytes
¬(1 < #(i2b(0) ' + bytes1) ∧ b2i((i2b(0) ' + bytes1).first) = 0 ∧ b2i((i2b(0) ' + bytes1).rest.first) < 0), 1 + # bytes1 < # int2bytes(bytes2int(i2b(0) ' + bytes1)), ∀ bytes0. # bytes0 < #(i2b(0) + bytes1) → # bytes0 < # int2bytes(bytes2int(bytes0)) → bytes0 = [] ⊦
Used simplifier rules: ⊦ (by ' + bytes).first = by;% ⊦ (bytes + bytes0) + bytes1 = bytes + bytes0 + bytes1;% ⊦ b2i(i2b(0)) = 0;% ⊦ #(bytes + bytes0) = # bytes + # bytes0;% ⊦ # by ' = 0 +1;% ⊦ 1 < m ↔ ¬(m = 0 ∨ m = 1);% ⊦ m + 1 ≠ 0;% ⊦ (m + n0) + n1 = m + n0 + n1;% ⊦ m + n = n + m;% ⊦ m + n = 1 ↔ m = 0 ∧ n = 1 ∨ n = 0 ∧ m = 1;% ⊦ # bytes = 0 ↔ bytes = [];% ⊦ (by ' + bytes).rest = bytes;% ⊦ m + n < m + n0 ↔ n < n0;% ⊦ ¬ n < n; Used terms: i2b(0) ' + bytes1