law u32_inc_exact_sym

bend-mathlib@0.8.1.0 · u32.bend:1201

import Base
import bend-mathlib@0.8.1.0/nat.bend as MNat

1201# U32 increment is exact without overflow: 1 + a < 2^32 implies to_nat (inc a) = 1 + a, reversed to rewrite toward the simple side.
1202law u32_inc_exact_sym:
1203  for a: U32
1204  for h: MNat.lt(1n+U32.to_nat(a), Nat.pow(2n, 32n))
1205  {1n+U32.to_nat(a) == U32.to_nat(U32.inc(a)) : Nat}