| uint2bits(i) = false ' + bitsinvert(bits0) + true ', 0 ≤ i, 0 < i, 1 < i, false ∈ uint2bits(i) ⊦ false ∈ bits0 |
⊦ bits ≠ [] → bitsinvert(bits) = (¬ bits.first)' + bitsinvert(bits.rest)
¬ bits0 ≠ [], uint2bits(i) = false ' + bitsinvert(bits0) + true ', 0 ≤ i, 0 < i, 1 < i, false ∈ uint2bits(i) ⊦ false ∈ bits0
bits0 ≠ [], uint2bits(i) = false ' + ((¬ bits0.first)' + bitsinvert(bits0.rest)) + true ', 0 ≤ i, 0 < i, 1 < i, false ∈ uint2bits(i) ⊦ false ∈ bits0
Used terms: bits0