| ¬(# lastn(m, int2bits(i)) ≠ 0 ∧ # bits ≠ 0 ∧ ¬ bits.first), bits2int(int2bits(i)) = bits2int(bits + lastn(m, int2bits(i))), # bits = # int2bits(i) - m, int2bits(i) = bits + lastn(m, int2bits(i)), 0 < i, m ≤ # int2bits(i) ⊦ bits = [], bits2int(lastn(m, int2bits(i))) = i % 2 ^ n→i(m), m = 0, lastn(m, int2bits(i)).first |
int2bits(i) = bits + lastn(m, int2bits(i)), # bits = # int2bits(i) - m, bits.first, m ≤ # int2bits(i), 0 < i ⊦ m = 0, bits2int(lastn(m, int2bits(i))) = i % 2 ^ n→i(m), bits = [], lastn(m, int2bits(i)).first
Used simplifier rules: int2int-inj: ⊦ bits2int(int2bits(i)) = i;% ⊦ i < j ∧ j = i0 → i < i0; (forward)% ⊦ # bits = 0 ↔ bits = [];% ⊦ n ≤ # bits → # lastn(n, bits) = n;