| 0 ≤ j + 1, 0 ≤ j ⊦ uint2bits(j + 1) = sgn(false ' + int2bits(j) +1) |
0 ≤ j ⊦ uint2bits(j + 1) = sgn(false ' + int2bits(j) +1)
Used simplifier rules: ⊦ i + j = j + i;% ⊦ i + j + i0 = (i + j) + i0;%i0 ≠ 0, i0 ≤ i ⊦ (* i) ≤ j → (* i0) ≤ j;% ⊦ (* j) ≤ i0 + (* j0) ↔ j - j0 ≤ i0;