| 1 < # bits ∧ 1 < #(boolvar ' + bits1), # bits ≤ 1 + # bits1 ∨ boolvar, ∀ boolvar, bits1, bits0. # bits0 < # bits → # bits0 ≤ 1 + # bits1 ∨ boolvar → bits0 = [] ∨ bitsand(bits0, boolvar ' + bits1) = bits0 ∨ true ∈ bits0 ⊦ bitsand(bits.butlast, (boolvar ' + bits1).butlast) + (bits.last ∧ (boolvar ' + bits1).last) = bits, bits = [], true ∈ bits |
# bits ≤ 1 + # bits1 ∨ boolvar, ∀ boolvar, bits1, bits0. # bits0 < # bits → # bits0 ≤ 1 + # bits1 ∨ boolvar → bits0 = [] ∨ bitsand(bits0, boolvar ' + bits1) = bits0 ∨ true ∈ bits0 ⊦ # bits = 1, bits1 = [], bits = [], bitsand(bits.butlast, boolvar ' + bits1.butlast) + (bits.last ∧ bits1.last)' = bits, true ∈ bits
Used simplifier rules: ⊦ bits ≠ [] → ((boolvar ' + bits).last ↔ bits.last);% ⊦ bits ≠ [] → (bits0 + bits).butlast = bits0 + bits.butlast;% ⊦ m + n = 1 ↔ m = 0 ∧ n = 1 ∨ n = 0 ∧ m = 1;% ⊦ m + n = n + m;% ⊦ (m + n0) + n1 = m + n0 + n1;% ⊦ m + 1 ≠ 0;% ⊦ (bits + bits0) + bits1 = bits + bits0 + bits1;% ⊦ # boolvar ' = 0 +1;% ⊦ #(bits + bits0) = # bits + # bits0;% ⊦ # bits = 0 ↔ bits = [];% ⊦ 1 < m ↔ ¬(m = 0 ∨ m = 1);% ⊦ bits + boolvar = bits + boolvar ';