| i = 2 ^ n→i(# bits) - 1, 2 ^ n→i(# bits) = i + 1, 0 ≤ i ⊦ uint2bits(i) = false ' + bits, false ∈ bits |
0 < 2 ^ n→i(# bits) ⊦ uint2bits(2 ^ n→i(# bits) - 1) = false ' + bits, false ∈ bits
Used simplifier rules: ⊦ 1 ≤ i ↔ 0 < i;% ⊦ i ≤ j - i0 ↔ i + i0 ≤ j;% ⊦ i + j = j + i;% ⊦ i + j + i0 = (i + j) + i0;% ⊦ i + (j - i) = j;