| bytes = by0 + bytes1, fillsgn(n, bytes) = by ' + bytes0, # bytes < n, by ∈ fillsgn(n, bytes) ⊦ fillsgn(n, bytes) = [], bytes = [], # bytes = 1, (¬ 0 ≤ b2i(by0) ⊃ i2b(~1);i2b(0)) = by |
fillsgn(n, by0 ' + bytes1) = by ' + bytes0, 1 + # bytes1 < n ⊦ (¬ 0 ≤ b2i(by0) ⊃ i2b(~1);i2b(0)) = by, bytes1 = []
Used simplifier rules: ⊦ by ∈ by0 ' ↔ by = by0;% ⊦ by ∈ bytes + bytes0 ↔ ¬ ¬(by ∈ bytes ∨ by ∈ bytes0);% ⊦ by ' + bytes = bytes0 → by ∈ bytes0; (forward)% ⊦ m + n = n + m;% ⊦ (m + n0) + n1 = m + n0 + n1;% ⊦ # bytes = 0 ↔ bytes = [];% ⊦ m + n = 1 ↔ m = 0 ∧ n = 1 ∨ n = 0 ∧ m = 1;% ⊦ # by ' = 0 +1;% ⊦ #(bytes + bytes0) = # bytes + # bytes0;% ⊦ (bytes + bytes0) + bytes1 = bytes + bytes0 + bytes1;% ⊦ by ' + bytes ≠ [];% ⊦ by + bytes = by ' + bytes;