| 2 ^ n→i(# int2bits(i)) + bits2int(bitsand(int2bits(i), int2bits(j))) < 0, # int2bits(j) < # bitsand(int2bits(i), int2bits(j)), # int2bits(i) < # bitsand(int2bits(i), int2bits(j)), # int2bits(j) ≤ # int2bits(i), j < 0, i < 0, i0 + 2 ^ n→i(# int2bits(j)) ≤ 0, i0 + 2 ^ n→i(# int2bits(i)) ≤ 0, bits2int(bitsand(int2bits(i), int2bits(j))) < i0 ⊦ |
⊦ bits0.first ∧ # bits0 ≤ # bits ∧ bits0 ≠ [] → # bitsand(bits, bits0) = # bits
Used simplifier rules: ⊦ ¬ n < n;% ⊦ j < 0 → int2bits(j).first;% ⊦ ¬ m ≤ n ↔ n < m;% ⊦ m ≤ n → (n < m ↔ false);% ⊦ int2bits(j) ≠ []; Used terms: int2bits(j), int2bits(i)