Greater-than-or-equal-to relation of a value of type
Function:
(defun ge-uint-uint (x y) (declare (xargs :guard (and (uintp x) (uintp y)))) (if (>= (integer-from-uint x) (integer-from-uint y)) (sint-from-integer 1) (sint-from-integer 0)))
Theorem:
(defthm sintp-of-ge-uint-uint (sintp (ge-uint-uint x y)))
Theorem:
(defthm ge-uint-uint-of-uint-fix-x (equal (ge-uint-uint (uint-fix x) y) (ge-uint-uint x y)))
Theorem:
(defthm ge-uint-uint-uint-equiv-congruence-on-x (implies (uint-equiv x x-equiv) (equal (ge-uint-uint x y) (ge-uint-uint x-equiv y))) :rule-classes :congruence)
Theorem:
(defthm ge-uint-uint-of-uint-fix-y (equal (ge-uint-uint x (uint-fix y)) (ge-uint-uint x y)))
Theorem:
(defthm ge-uint-uint-uint-equiv-congruence-on-y (implies (uint-equiv y y-equiv) (equal (ge-uint-uint x y) (ge-uint-uint x y-equiv))) :rule-classes :congruence)