| ¬(¬ fillsgn(n, int2bits(j)).first ∧ fillsgn(n, int2bits(j)) ≠ []), 0 ≤ j ⊦ bits2uint(fillsgn(n, int2bits(j))) = j |
0 ≤ j, fillsgn(n, int2bits(j)).first ⊦ bits2uint(fillsgn(n, int2bits(j))) = j
Used simplifier rules: int2bits-not-empty: ⊦ int2bits(j) ≠ [];% ⊦ fillsgn(n, bits) = [] ↔ bits = [] ∧ n = 0;