| 1 < #(by ' + bytes), 2 ^ ((n→i(# bytes) + 1) * 8 - 1) + bytes2int((by ' + bytes).butlast) * 256 + band(b2i((by ' + bytes).last), 255) < 0, b2i(by) < 0, ∀ by, bytes0. # bytes0 < # bytes → b2i(by) < 0 ∧ 2 ^ ((n→i(# bytes0) + 1) * 8 - 1) + bytes2int(by ' + bytes0) < 0 → false ⊦ |
b2i(by) < 0, band(255, b2i(bytes.last)) + 256 * bytes2int(by ' + bytes.butlast) + 2 ^ ((n→i(# bytes) + 1) * 8 - 1) < 0, ∀ by, bytes0. # bytes0 < # bytes → b2i(by) < 0 ∧ 2 ^ ((n→i(# bytes0) + 1) * 8 - 1) + bytes2int(by ' + bytes0) < 0 → false ⊦ bytes = []
Used simplifier rules: ⊦ j < i ∧ i ≤ 0 → j < 0; (forward)% ⊦ bytes ≠ [] → (bytes0 + bytes).butlast = bytes0 + bytes.butlast;% ⊦ bytes ≠ [] → (by ' + bytes).last = bytes.last;% ⊦ # bytes = 0 ↔ bytes = [];% ⊦ m + n = 1 ↔ m = 0 ∧ n = 1 ∨ n = 0 ∧ m = 1;% ⊦ m + n = n + m;% ⊦ (m + n0) + n1 = m + n0 + n1;% ⊦ m + 1 ≠ 0;% ⊦ 1 < m ↔ ¬(m = 0 ∨ m = 1);% ⊦ (bytes + bytes0) + bytes1 = bytes + bytes0 + bytes1;% ⊦ # by ' = 0 +1;% ⊦ #(bytes + bytes0) = # bytes + # bytes0;