| n ≤ # int2bytes(i) ⊦ bytes2int(fillsgn(n, int2bytes(i))) = i |
⊦ # bytes ≥ n → fillsgn(n, bytes) = bytes
Used simplifier rules: int2int: ⊦ bytes2int(int2bytes(i)) = i;% ⊦ n ≥ m ↔ m ≤ n;% ⊦ ¬ m ≤ n ↔ n < m;% ⊦ m ≤ n → (n < m ↔ false); Used terms: int2bytes(i), n