| ¬(uint2bits(i % 256) ≠ [] ∧ # uint2bits(i % 256) < 9), uint2bits(i) = uint2bits(i / 256) + fillsgn(9, uint2bits(i % 256)).rest, 255 < i, 0 < i, 0 ≤ i, # uint2bits(i / 256) + # fillsgn(9, uint2bits(i % 256)).rest ≤ 8 ⊦ bits2bytes(uint2bits(i)) = bits2bytes(uint2bits(i / 256)) + bits2bytes(int2bits(i % 256)).last ' |
uint2bits(i) = uint2bits(i / 256) + uint2bits(i % 256).rest, 9 ≤ # uint2bits(i % 256), 255 < i, 0 < i, 0 ≤ i, # uint2bits(i % 256).rest + # uint2bits(i / 256) ≤ 8 ⊦ bits2bytes(uint2bits(i)) = bits2bytes(uint2bits(i / 256)) + bits2bytes(int2bits(i % 256)).last '
Used simplifier rules: ⊦ n ≤ # bits → fillsgn(n, bits) = bits;% ⊦ ¬ m < n ↔ n ≤ m;%0 ≤ i ⊦ uint2bits(i) ≠ [];% ⊦ 0 < j ∧ 0 ≤ i → 0 ≤ i % j;