| true ' + bits0 ≠ [] ∧ (¬ (true ' + bits0).first) ∈ bitsinvert(bits1), uint2bits(~ i) = (false ' + bits1) + true ' + bits0, bitsinvert(uint2bits(~ i)) +1 = (true ' + bitsinvert(bits1)) + true ' + bits0, i < 0, i < ~1, false ∈ uint2bits(~ i), (bitsinvert(bits1) + true ').first ⊦ bits1 = [], true ∈ bits0, false ∈ (sgn(bitsinvert(bits1)) + true ' + bits0).rest |
uint2bits(~ i) = (false ' + bits1) + true ' + bits0, bitsinvert(uint2bits(~ i)) +1 = (true ' + bitsinvert(bits1)) + true ' + bits0, i < 0, i < ~1, false ∈ uint2bits(~ i), (bitsinvert(bits1) + true ').first, true ∈ bits1 ⊦ bits1 = [], true ∈ bits0, false ∈ (sgn(bitsinvert(bits1)) + true ' + bits0).rest
Used simplifier rules: ⊦ false ∈ bitsinvert(bits) ↔ true ∈ bits;% ⊦ (boolvar ' + bits).first ↔ boolvar;% ⊦ (bits + bits0) + bits1 = bits + bits0 + bits1;% ⊦ boolvar ' + bits ≠ [];