| ¬(# bits2bytes(bits) < n ∧ bytes2int(bits2bytes(bits)) < 0), # bits ≤ 8 * (n - 1) ⊦ bits = [], n = 0, fix(n, bits2bytes(bits)) = bits2bytes(fillsgn(n * 8, bits)) |
# bits ≤ 8 * (n - 1) ⊦ bits = [], n = 0, fix(n, bits2bytes(bits)) = bits2bytes(fillsgn(n * 8, bits)), ¬ n ≤ # bits2bytes(bits) ∧ bits.first
Used simplifier rules: bits2int-neg: ⊦ bits ≠ [] → (bytes2int(bits2bytes(bits)) < 0 ↔ bits.first);% ⊦ ¬ m < n ↔ n ≤ m;