| 8 * (2 + n→i(# bytes1)) - 1 = 8 + (8 * (1 + n→i(# bytes1)) - 1), b2i(by) < 0, 2 ^ (8 * (2 + n→i(# bytes1)) - 1) + 256 * bytes2int(by ' + bytes1) + band(255, b2i(by0)) < 0, ∀ by, bytes0. # bytes0 < #(bytes1 + by0 ') → b2i(by) < 0 ∧ 2 ^ ((n→i(# bytes0) + 1) * 8 - 1) + bytes2int(by ' + bytes0) < 0 → false ⊦ |
b2i(by) < 0, 2 ^ (8 + (8 * (1 + n→i(# bytes1)) - 1)) + 256 * bytes2int(by ' + bytes1) + band(255, b2i(by0)) < 0, ∀ by, bytes0. # bytes0 < #(bytes1 + by0 ') → b2i(by) < 0 ∧ 2 ^ ((n→i(# bytes0) + 1) * 8 - 1) + bytes2int(by ' + bytes0) < 0 → false ⊦