| 1 - j = i1 * 2 + j0 ∧ 0 ≤ j0 ∧ j0 < 2 ∧ 0 < 2 ∧ 0 ≤ 1 - j, j ≤ 2 ^ (i - 1), j ≤ 2 ^ i, 0 ≤ 2 ^ (i - 1), 1 < j + 2 ^ i, j < 2 ^ (i - 1), j + 1 < i, 0 < 2 ^ (i - 1), 0 < i, 0 ≤ j + 2 ^ (i - 1), j < i, j + 1 < 2 ^ (i - 1), j < 0, 0 < j + 2 ^ i, j < 2 ^ i, j + 1 < 2 ^ i, 1 < 2 ^ i, 0 < 2 ^ i, 0 ≤ 2 ^ i, 0 ≤ j + 2 ^ i, 2 ^ (i - 2) < i1, ∀ i0, j. i→n(i0) < i→n(i) → true → j < 0 ∧ 0 < i0 ∧ abs(j) ≤ 2 ^ (i0 - 1) → uint2bits(j + 2 ^ i0) = false ' + fillsgn(i→n(i0), int2bits(j)) ⊦ uint2bits(2 ^ (i - 1) + (j - 1) / 2) + (~1 = j % 2)' = false ' + fillsgn(i→n(i), int2bits(j)), i = 1, j = 0 |
1 = (i1 * 2 + j0) + j, i1 * 2 + j0 < 2 ^ i, j < j0, j ≤ 2 ^ (i - 1), j ≤ 2 ^ i, 0 ≤ 2 ^ (i - 1), 1 < j + 2 ^ i, j < 2 ^ (i - 1), j + 1 < i, 0 < 2 ^ (i - 1), 0 < i, 0 ≤ j + 2 ^ (i - 1), j < i, j + 1 < 2 ^ (i - 1), 0 < j + 2 ^ i, j < 2 ^ i, j + 1 < 2 ^ i, 1 < 2 ^ i, 0 < 2 ^ i, 0 ≤ 2 ^ i, 0 ≤ j + 2 ^ i, 2 ^ (i - 2) < i1, 0 ≤ j0, j0 < 2, j ≤ 1, j < 0, ∀ i0, j. i→n(i0) < i→n(i) → true → j < 0 ∧ 0 < i0 ∧ abs(j) ≤ 2 ^ (i0 - 1) → uint2bits(j + 2 ^ i0) = false ' + fillsgn(i→n(i0), int2bits(j)) ⊦ uint2bits(2 ^ (i - 1) + (j - 1) / 2) + (~1 = j % 2)' = false ' + fillsgn(i→n(i), int2bits(j)), i = 1, j = 0
Used simplifier rules: i0 ≠ 0, i0 ≤ i ⊦ (* i) < j → (* i0) < j;%j0 ≠ 0, j < j0 ⊦ i < (* j) → i < (* j0);% ⊦ i ≠ j → (i ≤ j ↔ i < j);% ⊦ i < 1 ↔ i ≤ 0;% ⊦ i + (* j) < (* j0) ↔ i < j0 - j;% ⊦ i +1 = i + 1;% ⊦ i < j ∧ j < j0 → i < j0; (forward)% ⊦ i < j ∧ j < i0 → i +1 < i0; (forward)% ⊦ i + j < i + i0 ↔ j < i0;% ⊦ i < j ∧ j ≤ j0 → i < j0; (forward)% ⊦ i < j ∧ i = i0 → i0 < j; (forward)% ⊦ i ≤ j ∧ j < j0 → i < j0; (forward)% ⊦ i + 0 = i;% ⊦ i ≤ j - i0 ↔ i + i0 ≤ j;% ⊦ i + j = j + i;% ⊦ i + j + i0 = (i + j) + i0;% ⊦ i - j = i0 ↔ i = i0 + j;