| ¬(1 < #(i2b(~1) ' + bytes1) ∧ b2i((i2b(~1) ' + bytes1).first) = ~1 ∧ 0 ≤ b2i((i2b(~1) ' + bytes1).rest.first)), 1 + # bytes1 < # int2bytes(bytes2int(i2b(~1) ' + bytes1)), ∀ bytes0. # bytes0 < #(i2b(~1) + bytes1) → # bytes0 < # int2bytes(bytes2int(bytes0)) → bytes0 = [] ⊦ |
1 + # bytes1 < # int2bytes(bytes2int(i2b(~1) ' + bytes1)), b2i(bytes1.first) < 0, ∀ bytes0. # bytes0 < #(i2b(~1) + bytes1) → # bytes0 < # int2bytes(bytes2int(bytes0)) → bytes0 = [] ⊦ bytes1 = []
Used simplifier rules: bytes2int-one: ⊦ bytes2int(by ') = b2i(by);%int2bytes-byte: ~128 ≤ i, i < 128 ⊦ int2bytes((* i)) = i2b(i) ';% ⊦ j < i ∧ i ≤ 0 → j < 0; (forward)% ⊦ bytes + [] = bytes;% ⊦ # [] = 0;% ⊦ ¬ i ≤ j ↔ j < i;% ⊦ (by ' + bytes).rest = bytes;%~128 ≤ i, i ≤ 127 ⊦ b2i(i2b((* i))) = i;% ⊦ (by ' + bytes).first = by;% ⊦ # bytes = 0 ↔ bytes = [];% ⊦ 1 = m + 1 ↔ m = 0;% ⊦ m + n = n + m;% ⊦ (m + n0) + n1 = m + n0 + n1;% ⊦ m + 1 ≠ 0;% ⊦ 1 < m ↔ ¬(m = 0 ∨ m = 1);% ⊦ (bytes + bytes0) + bytes1 = bytes + bytes0 + bytes1;% ⊦ # by ' = 0 +1;% ⊦ #(bytes + bytes0) = # bytes + # bytes0;