| bits = bits2 + boolvar ', # bits ≤ 1 + # bits1, ∀ bits1, bits0. # bits0 < # bits → # bits0 ≤ 1 + # bits1 → bits0 = [] ∨ bitsor(bits0, false ' + bits1) = false ' + bits1 ∨ true ∈ bits0 ⊦ # bits = 1, bits1 = [], bits = [], bitsor(bits2, false ' + bits1.butlast) + (boolvar ∨ bits1.last)' = false ' + bits1, true ∈ bits |
# bits2 ≤ # bits1, ∀ bits1, bits0. # bits0 < #(bits2 + false ') → # bits0 ≤ 1 + # bits1 → bits0 = [] ∨ bitsor(bits0, false ' + bits1) = false ' + bits1 ∨ true ∈ bits0 ⊦ bits1 = [], bits2 = [], bitsor(bits2, false ' + bits1.butlast) + bits1.last ' = false ' + bits1, true ∈ bits2
Used simplifier rules: ⊦ boolvar ∈ boolvar0 ' ↔ boolvar ↔ boolvar0;% ⊦ boolvar ∈ bits + bits0 ↔ ¬ ¬(boolvar ∈ bits ∨ boolvar ∈ bits0);% ⊦ m + n ≤ m + n0 ↔ n ≤ n0;% ⊦ bits + boolvar ' ≠ [];% ⊦ m + n = n + m;% ⊦ (m + n0) + n1 = m + n0 + n1;% ⊦ # bits = 0 ↔ bits = [];% ⊦ m + n = 1 ↔ m = 0 ∧ n = 1 ∨ n = 0 ∧ m = 1;% ⊦ (bits + bits0) + bits1 = bits + bits0 + bits1;% ⊦ # boolvar ' = 0 +1;% ⊦ #(bits + bits0) = # bits + # bits0;