| uint2bits(i) = false ' + bits0, bits0.first, 0 < i, false ∈ uint2bits(i) ⊦ uint2bits(i) = false ' + true ' + bits0.rest, ∃ bits. uint2bits(i) = false ' + true ' + bits |
Used simplifier rules: uint2bits-zero-01: 0 ≤ i ⊦ uint2bits(i) = false ' ↔ i = 0;% ⊦ boolvar + bits = boolvar ' + bits;% ⊦ bits + [] = bits;% ⊦ (bits + bits0) + bits1 = bits + bits0 + bits1;% ⊦ i < j → ¬ j < i;% ⊦ ¬ i ≤ j ↔ j < i;% ⊦ i < j ∧ i = i0 → i0 < j; (forward)% ⊦ i < j ∧ j = i0 → i < i0; (forward)%bits ≠ [] ⊦ (boolvar ↔ bits.first) ∧ bits0 = bits.rest ↔ bits = boolvar + bits0; (elim) Used terms: bits0, boolvar, bits1