| 0 ≤ bits2uint(bits0), 0 < bits2uint(bits0), ∀ bits1. # bits1 < #(bits0 + true ') → true → uint2bits(bits2uint(bits1)) = sgn(false ' + bits1) ⊦ uint2bits(bits2uint(bits0)) + ((bits2uint(bits0) * 2 + 1) % 2 = 1)' = sgn(false ' + bits0 + true ') |
0 ≤ bits2uint(bits0), 0 < bits2uint(bits0), ∀ bits1. # bits1 < #(bits0 + true ') → true → uint2bits(bits2uint(bits1)) = sgn(false ' + bits1) ⊦ uint2bits(bits2uint(bits0)) + true ' = sgn(false ' + bits0 + true ')
Used simplifier rules: ⊦ i + j = j + i;% ⊦ i + j + i0 = (i + j) + i0;% ⊦ i * j = j * i;% ⊦ i * j * j0 = (i * j) * j0;% ⊦ 0 ≤ i → (i * 2 + 1) % 2 = 1;