| ¬(# bytes < n ∧ bytes2int(bytes) < 0), # bytes < n ⊦ fillsgn(n, bytes) = fix(n, bytes) |
# bytes < n, 0 ≤ bytes2int(bytes) ⊦ fillsgn(n, bytes) = fix(n, bytes)
Used simplifier rules: ⊦ i ≤ j ∧ 0 ≤ i → 0 ≤ j; (forward)% ⊦ ¬ i < j ↔ j ≤ i;% ⊦ m < n → (n ≤ m ↔ false);% ⊦ ¬ m < n ↔ n ≤ m;