| i < ~ 128, int2bytes((i - 255) / 256) + int2bytes(i % 256).last ' = i2b(0) ' + by ' + bytes, i2b(0) ∈ int2bytes((i - 255) / 256) + int2bytes(i % 256).last ', 0 ≤ b2i(by), i < ~128, i < 0, ∀ bytes, by, i0. i→n(i0) < i→n(i) → int2bytes(i0) = i2b(0) ' + by ' + bytes ∧ 0 ≤ b2i(by) ∧ i2b(0) ∈ int2bytes(i0) → false ⊦ |
int2bytes((i - 255) / 256) + int2bytes(i % 256).last ' = i2b(0) ' + by ' + bytes, i < 0, i < ~128, 0 ≤ b2i(by), ∀ bytes, by, i0. i→n(i0) < i→n(i) → int2bytes(i0) = i2b(0) ' + by ' + bytes ∧ 0 ≤ b2i(by) ∧ i2b(0) ∈ int2bytes(i0) → false ⊦ int2bytes(i % 256).last ≠ i2b(0) ∧ int2bytes(i % 256).last ≠ by ∧ ¬ int2bytes(i % 256).last ∈ bytes, ¬ i2b(0) ∈ int2bytes((i - 255) / 256) ∧ i2b(0) ≠ int2bytes(i % 256).last
Used simplifier rules: ⊦ by ' + bytes = bytes0 → by ∈ bytes0; (forward)% ⊦ bytes + by ' = bytes0 → by ∈ bytes0; (forward)% ⊦ (bytes + bytes0) + bytes1 = bytes + bytes0 + bytes1;% ⊦ by ∈ by0 ' ↔ by = by0;% ⊦ by ∈ bytes + bytes0 ↔ ¬ ¬(by ∈ bytes ∨ by ∈ bytes0);%j0 ≠ 0, j ≤ j0 ⊦ i < (* j) → i < (* j0);