| bits2uint(bits) = 0, true ∈ bits, ∀ bits0. # bits0 < # bits → bits2uint(bits0) = 0 ∧ true ∈ bits0 → false ⊦ |
⊦ bits ≠ [] ∧ bits.last → bits2uint(bits) = bits2uint(bits.butlast) * 2 + 1
¬(bits ≠ [] ∧ bits.last), bits2uint(bits) = 0, true ∈ bits, ∀ bits0. # bits0 < # bits → bits2uint(bits0) = 0 ∧ true ∈ bits0 → false ⊦
Used simplifier rules: ⊦ (* j) = i0 + (* j0) ↔ j - j0 = i0;% ⊦ 2 * i ≠ ~1;% ⊦ i * j * j0 = (i * j) * j0;% ⊦ i * j = j * i;% ⊦ i + j + i0 = (i + j) + i0;% ⊦ i + j = j + i; Used terms: bits