| 1 < #(true ' + bits2) ∧ 1 < #(true ' + bits), bitsand((true ' + bits2).butlast, (true ' + bits).butlast) + ((true ' + bits2).last ∧ (true ' + bits).last) = false ' + bits1, ∀ bits1, bits, bits0. # bits0 < # bits2 → bitsand(true ' + bits0, true ' + bits) = false ' + bits1 → false ⊦ |
bitsand(true ' + bits2.butlast, true ' + bits.butlast) + (bits2.last ∧ bits.last)' = false ' + bits1, ∀ bits1, bits, bits0. # bits0 < # bits2 → bitsand(true ' + bits0, true ' + bits) = false ' + bits1 → false ⊦ bits = [], bits2 = [], ¬ false ∈ bitsand(true ' + bits2.butlast, true ' + bits.butlast) ∧ bits2.last ∧ bits.last, bits2.last ∧ bits.last ∧ ¬ true ∈ bits1
Used simplifier rules: ⊦ boolvar ∈ boolvar0 ' ↔ boolvar ↔ boolvar0;% ⊦ boolvar ∈ bits + bits0 ↔ ¬ ¬(boolvar ∈ bits ∨ boolvar ∈ bits0);% ⊦ boolvar ' + bits = bits0 → boolvar ∈ bits0; (forward)% ⊦ bits + boolvar ' = bits0 → boolvar ∈ bits0; (forward)% ⊦ bits ≠ [] → ((boolvar ' + bits).last ↔ bits.last);% ⊦ bits ≠ [] → (bits0 + bits).butlast = bits0 + bits.butlast;% ⊦ # bits = 0 ↔ bits = [];% ⊦ m + n = 1 ↔ m = 0 ∧ n = 1 ∨ n = 0 ∧ m = 1;% ⊦ m + n = n + m;% ⊦ (m + n0) + n1 = m + n0 + n1;% ⊦ m + 1 ≠ 0;% ⊦ 1 < m ↔ ¬(m = 0 ∨ m = 1);% ⊦ (bits + bits0) + bits1 = bits + bits0 + bits1;% ⊦ # boolvar ' = 0 +1;% ⊦ #(bits + bits0) = # bits + # bits0;% ⊦ bits + boolvar = bits + boolvar ';