| # bytes ≤ # fillsgn(# bytes, int2bytes(bytes2int(bytes))) ⊦ ¬ # bytes < 2, bytes = [], fillsgn(2, int2bytes(bytes2int(bytes))) = bytes ↔ ¬ # bytes < 2 ∧ (2 < # bytes → int2bytes(bytes2int(bytes)) = bytes) |
fillsgn(2, int2bytes(bytes2int(bytes))) = bytes, # bytes ≤ # fillsgn(# bytes, int2bytes(bytes2int(bytes))), # bytes < 2 ⊦ bytes = []
Used simplifier rules: ⊦ m < n → n ≠ 0; (forward)% ⊦ m < n → (n ≤ m ↔ false);% ⊦ ¬ m < n ↔ n ≤ m;