| ¬(# bits2bytes(bits) < n ∧ 0 ≤ bytes2int(bits2bytes(bits))), # bits ≤ 8 * (n - 1) ⊦ bits = [], n = 0, fix(n, bits2bytes(bits)) = bits2bytes(fillsgn(n * 8, bits)), ¬ n ≤ # bits2bytes(bits) ∧ bits.first |
# bits ≤ 8 * (n - 1) ⊦ bits = [], n = 0, fix(n, bits2bytes(bits)) = bits2bytes(fillsgn(n * 8, bits)), ¬ n ≤ # bits2bytes(bits) ∧ bits.first, ¬ n ≤ # bits2bytes(bits) ∧ ¬ bits.first
Used simplifier rules: bits2int-pos: ⊦ bits ≠ [] → (0 ≤ bytes2int(bits2bytes(bits)) ↔ ¬ bits.first);% ⊦ ¬ m < n ↔ n ≤ m;