| bitsinvert(bits) +1.first ∧ bitsinvert(bits) +1 ≠ [], bits.first, 0 < bits2uint(bitsinvert(bits) +1), 2 ^ n→i(# bits) < bits2uint(bitsinvert(bits) +1), 2 + # bits ≤ #(false ' + bitsinvert(bits) +1), 0 ≤ bits2uint(bitsinvert(bits) +1), bitsinvert(bits) +1.first ⊦ bits = [] |
# bits < # bitsinvert(bits) +1, 2 ^ n→i(# bits) < bits2uint(bitsinvert(bits) +1), 0 < bits2uint(bitsinvert(bits) +1), bits.first, bitsinvert(bits) +1.first, 0 ≤ bits2uint(bitsinvert(bits) +1) ⊦ bitsinvert(bits) +1 = [], bits = []
Used simplifier rules: ⊦ # bits = 0 ↔ bits = [];% ⊦ m < n → n ≠ 0; (forward)% ⊦ m + n = n + m;% ⊦ (m + n0) + n1 = m + n0 + n1;% ⊦ m + 1 ≤ n ↔ m < n;%n0 < n ⊦ m + (* n) ≤ m0 + (* n0) ↔ m + (n - n0) ≤ m0;% ⊦ (bits + bits0) + bits1 = bits + bits0 + bits1;% ⊦ # boolvar ' = 0 +1;% ⊦ #(bits + bits0) = # bits + # bits0;