| ¬(# bytes < n ∧ bytes2int(bytes) < 0), # bytes < n ⊦ # bytes = n, bytes2int(fix(n, bytes)) = bytes2int(bytes), bytes = [] |
# bytes < n, 0 ≤ bytes2int(bytes) ⊦ # bytes = n, bytes2int(fix(n, bytes)) = bytes2int(bytes), bytes = []
Used simplifier rules: ⊦ i ≤ j ∧ 0 ≤ i → 0 ≤ j; (forward)% ⊦ ¬ i < j ↔ j ≤ i;% ⊦ m < n → ¬ n < m;% ⊦ m ≠ n → (¬ m < n ↔ n < m);