| ¬ 8 < #(uint2bits(i / 256) + fillsgn(9, uint2bits(i % 256)).rest), uint2bits(i) = uint2bits(i / 256) + fillsgn(9, uint2bits(i % 256)).rest, 255 < i, 0 < i, 0 ≤ i ⊦ bits2bytes(uint2bits(i / 256) + fillsgn(9, uint2bits(i % 256)).rest) = bits2bytes(uint2bits(i / 256)) + bits2bytes(int2bits(i % 256)).last ' |
uint2bits(i) = uint2bits(i / 256) + fillsgn(9, uint2bits(i % 256)).rest, 255 < i, 0 < i, 0 ≤ i, # uint2bits(i / 256) + # fillsgn(9, uint2bits(i % 256)).rest ≤ 8 ⊦ bits2bytes(uint2bits(i)) = bits2bytes(uint2bits(i / 256)) + bits2bytes(int2bits(i % 256)).last '
Used simplifier rules: ⊦ ¬ m < n ↔ n ≤ m;% ⊦ (bits + bits0) + bits1 = bits + bits0 + bits1;% ⊦ #(bits + bits0) = # bits + # bits0;