| ¬ 1 < # bytes, # bytes = # int2bytes(bytes2int(bytes)), ∀ bytes0. # bytes0 < # bytes → true → # bytes0 = # int2bytes(bytes2int(bytes0)) → bytes0 = int2bytes(bytes2int(bytes0)) ⊦ bytes = int2bytes(bytes2int(bytes)) |
1 = # int2bytes(bytes2int(bytes)), # bytes = 1, ∀ bytes0. # bytes0 < 1 → true → # bytes0 = # int2bytes(bytes2int(bytes0)) → bytes0 = int2bytes(bytes2int(bytes0)) ⊦ bytes = int2bytes(bytes2int(bytes)), bytes = []
Used simplifier rules: ⊦ # [] = 0;% ⊦ # bytes = 0 ↔ bytes = [];% ⊦ 1 < m ↔ ¬(m = 0 ∨ m = 1);