| bytes = bytes1 + by0 ', b2i(by) < 0, 256 * bytes2int(i2b(0) ' + by ' + bytes1) + band(255, b2i(by0)) < 2 ^ ((n→i(# bytes) + 1) * 8 - 1), ∀ by, bytes0. # bytes0 < # bytes → true → b2i(by) < 0 → 2 ^ ((n→i(# bytes0) + 1) * 8 - 1) ≤ bytes2int(i2b(0) ' + by ' + bytes0) ⊦ bytes = [] |
b2i(by) < 0, 256 * bytes2int(i2b(0) ' + by ' + bytes1) + band(255, b2i(by0)) < 2 ^ (8 * (2 + n→i(# bytes1)) - 1), ∀ by, bytes0. # bytes0 < #(bytes1 + by0 ') → true → b2i(by) < 0 → 2 ^ ((n→i(# bytes0) + 1) * 8 - 1) ≤ bytes2int(i2b(0) ' + by ' + bytes0) ⊦
Used simplifier rules: ⊦ m + n = n + m;% ⊦ (m + n0) + n1 = m + n0 + n1;% ⊦ n→i(m + n) = n→i(m) + n→i(n);% ⊦ # by ' = 0 +1;% ⊦ #(bytes + bytes0) = # bytes + # bytes0;% ⊦ (bytes + bytes0) + bytes1 = bytes + bytes0 + bytes1;% ⊦ bytes + by ' ≠ [];