| ¬(# bits2bytes(bits) < n ∧ bytes2int(bits2bytes(bits)) < 0), # bits ≤ 8 * n ⊦ n = 0, bits = [], fix(n, bits2bytes(bits)) = bits2bytes(mklist(bits.first, n * 8 - # bits) + bits) |
# bits ≤ 8 * n ⊦ n = 0, bits = [], fix(n, bits2bytes(bits)) = bits2bytes(mklist(bits.first, n * 8 - # bits) + bits), ¬ n ≤ # bits2bytes(bits) ∧ bits.first
Used simplifier rules: bits2int-neg: ⊦ bits ≠ [] → (bytes2int(bits2bytes(bits)) < 0 ↔ bits.first);% ⊦ ¬ m < n ↔ n ≤ m;