0 ≤ j ⊦ 2 ^ n→i(# int2bits(j).rest) = j + 1, false ∈ int2bits(j).rest
Used simplifier rules: ⊦ i - j = i0 ↔ i = i0 + j;