| uint2bits(2 * 2 ^ i - i0 + 1) = boolvar + bits ∧ uint2bits(2 * 2 ^ i - i0 + 1) ≠ [], 0 < 2 ^ i, 1 < 2 ^ i, i0 < 2 ^ i, 2 ^ i ≤ i0 * 2, 0 < i, 0 ≤ 2 ^ i, i0 * 2 + 1 < 4 * 2 ^ i, 0 ≤ i, 0 ≤ i0, 0 < i0, i0 < 2 * 2 ^ i, ∀ j0, i. i→n(j0) < i→n(i0 * 2 + 1) → 0 < i ∧ 0 ≤ j0 ∧ 2 ^ i < j0 ∧ j0 < 2 * 2 ^ i → sgn(uint2bits(2 ^ (i + 2) - j0).rest) = uint2bits(2 ^ (i + 2) - j0).rest ⊦ 4 * 2 ^ i = 2 * (i0 + 1), sgn(bits + true ') = bits + true ', false ∈ bits |
uint2bits(2 * 2 ^ i - i0 + 1) = boolvar ' + bits, 0 < 2 ^ i, 1 < 2 ^ i, i0 < 2 ^ i, 2 ^ i ≤ i0 * 2, 0 < i, 0 ≤ 2 ^ i, i0 * 2 + 1 < 4 * 2 ^ i, 0 ≤ i, 0 ≤ i0, 0 < i0, i0 < 2 * 2 ^ i, ∀ j0, i. i→n(j0) < i→n(i0 * 2 + 1) → 0 < i ∧ 0 ≤ j0 ∧ 2 ^ i < j0 ∧ j0 < 2 * 2 ^ i → sgn(uint2bits(2 ^ (i + 2) - j0).rest) = uint2bits(2 ^ (i + 2) - j0).rest ⊦ 4 * 2 ^ i = 2 * (i0 + 1), sgn(bits + true ') = bits + true ', false ∈ bits
Used simplifier rules: uint2bits-empty: 0 ≤ i ⊦ uint2bits(i) ≠ [];% ⊦ boolvar ∈ boolvar0 ' ↔ boolvar ↔ boolvar0;% ⊦ boolvar ∈ bits + bits0 ↔ ¬ ¬(boolvar ∈ bits ∨ boolvar ∈ bits0);% ⊦ i * j = j * i;% ⊦ (bits + bits0) + bits1 = bits + bits0 + bits1;% ⊦ boolvar ' + bits = bits0 → boolvar ∈ bits0; (forward)% ⊦ i ≤ j - i0 ↔ i + i0 ≤ j;% ⊦ i + 1 ≤ j ↔ i < j;% ⊦ ¬ i < j ↔ j ≤ i;% ⊦ i < j → (¬ ¬ j ≤ i ↔ false);% ⊦ i + j + i0 = (i + j) + i0;% ⊦ i + j = j + i;% ⊦ boolvar + bits = boolvar ' + bits;