pub broadcast proof fn lemma_mul_ordering(x: int, y: int)
Expand description
requires
x != 0,
y != 0,
0 <= x * y,
ensures
#[trigger] (x * y) >= x && x * y >= y,

Proof that, since the product of the two integers x and y is nonnegative, that product is greater than or equal to each of x and y