| 1 + # bytes1 < # int2bytes(bytes2int(i2b(~1) ' + bytes1)), ∀ bytes0. # bytes0 < #(i2b(~1) + bytes1) → # bytes0 < # int2bytes(bytes2int(bytes0)) → bytes0 = [] ⊦ |
1 < # bytes, b2i(bytes.first) = ~1, 0 ≤ b2i(bytes.rest.first) ⊦ int2bytes(bytes2int(bytes)) = bytes
¬(1 < #(i2b(~1) ' + bytes1) ∧ b2i((i2b(~1) ' + bytes1).first) = ~1 ∧ 0 ≤ b2i((i2b(~1) ' + bytes1).rest.first)), 1 + # bytes1 < # int2bytes(bytes2int(i2b(~1) ' + bytes1)), ∀ bytes0. # bytes0 < #(i2b(~1) + bytes1) → # bytes0 < # int2bytes(bytes2int(bytes0)) → bytes0 = [] ⊦
Used simplifier rules: ⊦ (by ' + bytes).first = by;% ⊦ (bytes + bytes0) + bytes1 = bytes + bytes0 + bytes1;%~128 ≤ i, i ≤ 127 ⊦ b2i(i2b((* i))) = i;% ⊦ #(bytes + bytes0) = # bytes + # bytes0;% ⊦ # by ' = 0 +1;% ⊦ 1 < m ↔ ¬(m = 0 ∨ m = 1);% ⊦ m + 1 ≠ 0;% ⊦ (m + n0) + n1 = m + n0 + n1;% ⊦ m + n = n + m;% ⊦ m + n = 1 ↔ m = 0 ∧ n = 1 ∨ n = 0 ∧ m = 1;% ⊦ # bytes = 0 ↔ bytes = [];% ⊦ (by ' + bytes).rest = bytes;% ⊦ m + n < m + n0 ↔ n < n0;% ⊦ ¬ n < n; Used terms: i2b(~1) ' + bytes1