| ¬ true ∈ bits0, bits2uint(bits0) = 0, ∀ bits1. # bits1 < #(bits0 + true ') → true → uint2bits(bits2uint(bits1)) = sgn(false ' + bits1) ⊦ false ' + true ' = sgn(false ' + bits0 + true ') |
∀ bits1. # bits1 < #(bits0 + true ') → true → uint2bits(bits2uint(bits1)) = sgn(false ' + bits1) ⊦ false ' + true ' = sgn(false ' + bits0 + true '), true ∈ bits0
Used simplifier rules: bits2uint-zeros: ⊦ ¬ true ∈ bits → bits2uint(bits) = 0;