| bits.first, # bits ≤ # bits1, ∀ bits2, bits1, bits0. # bits2 < # bits → # bits2 ≤ # bits1 ∧ bits2.first → bits2 = [] ∨ bitsand(bits2, bits0 + bits1) = bits0 + bitsand(bits2, bits1) ⊦ bits = true ', # bits0 + # bits1 = 0, bits1 = [], bits = [], bits1 = bits1.first ', bitsand(bits.butlast, bits0 + bits1.butlast) = bits0 + bitsand(bits.butlast, bits1.butlast) |
bits.first, # bits ≤ # bits1, ∀ bits2, bits1, bits0. # bits2 < # bits → # bits2 ≤ # bits1 ∧ bits2.first → bits2 = [] ∨ bitsand(bits2, bits0 + bits1) = bits0 + bitsand(bits2, bits1) ⊦ # bits.butlast ≤ # bits1.butlast ∧ bits.butlast.first, bits = true ', # bits0 + # bits1 = 0, bits1 = [], bits = [], bits1 = bits1.first ', bitsand(bits.butlast, bits0 + bits1.butlast) = bits0 + bitsand(bits.butlast, bits1.butlast)
Used simplifier rules: ⊦ bits ≠ [] → (bits.butlast = [] ↔ bits = bits.first ');% ⊦ bits ≠ [] → # bits.butlast = # bits - 1;% ⊦ # bits = 0 ↔ bits = [];% ⊦ m < 1 ↔ m = 0;% ⊦ ¬ m ≤ n ↔ n < m;%n0 ≤ n ⊦ n - n0 < m ↔ n < m + n0;% ⊦ m < n + 1 ↔ ¬ n < m;% ⊦ ¬ n < n;% ⊦ (m + n0) + n1 = m + n0 + n1;% ⊦ m + n = n + m; Used terms: bits.butlast, bits1.butlast, bits0