| ¬(¬ false ∈ bits ∧ 0 ≤ j), uint2bits(j) = false ' + true ' + bits, 0 ≤ j ⊦ 2 ^ n→i(# uint2bits(j).rest) = j + 1, false ∈ uint2bits(j).rest |
uint2bits(j) = false ' + true ' + bits, 0 ≤ j, false ∈ bits ⊦ 2 ^ n→i(# uint2bits(j).rest) = j + 1, false ∈ uint2bits(j).rest
Used simplifier rules: ⊦ i ≤ j → (¬ ¬ j < i ↔ false);% ⊦ ¬ i ≤ j ↔ j < i;