let ap, bm, cp be non pair set ; :: thesis: for dm, cin being set
for s being State of (BitFTA1Circ ap,bm,cp,dm,cin)
for a1, a2, a3 being Element of BOOLEAN st a1 = s . ap & a2 = s . bm & a3 = s . cp holds
( (Following s,2) . (BitFTA1CarryOutput ap,bm,cp,dm,cin) = ((a1 '&' ('not' a2)) 'or' (('not' a2) '&' a3)) 'or' (a3 '&' a1) & (Following s,2) . (BitFTA1AdderOutputI ap,bm,cp,dm,cin) = 'not' ((a1 'xor' ('not' a2)) 'xor' a3) )

let dm, cin be set ; :: thesis: for s being State of (BitFTA1Circ ap,bm,cp,dm,cin)
for a1, a2, a3 being Element of BOOLEAN st a1 = s . ap & a2 = s . bm & a3 = s . cp holds
( (Following s,2) . (BitFTA1CarryOutput ap,bm,cp,dm,cin) = ((a1 '&' ('not' a2)) 'or' (('not' a2) '&' a3)) 'or' (a3 '&' a1) & (Following s,2) . (BitFTA1AdderOutputI ap,bm,cp,dm,cin) = 'not' ((a1 'xor' ('not' a2)) 'xor' a3) )

let s be State of (BitFTA1Circ ap,bm,cp,dm,cin); :: thesis: for a1, a2, a3 being Element of BOOLEAN st a1 = s . ap & a2 = s . bm & a3 = s . cp holds
( (Following s,2) . (BitFTA1CarryOutput ap,bm,cp,dm,cin) = ((a1 '&' ('not' a2)) 'or' (('not' a2) '&' a3)) 'or' (a3 '&' a1) & (Following s,2) . (BitFTA1AdderOutputI ap,bm,cp,dm,cin) = 'not' ((a1 'xor' ('not' a2)) 'xor' a3) )

set S1 = BitGFA1Str ap,bm,cp;
set C1 = BitGFA1Circ ap,bm,cp;
set A1 = GFA1AdderOutput ap,bm,cp;
set A2 = GFA1CarryOutput ap,bm,cp;
set S2 = BitGFA2Str (GFA1AdderOutput ap,bm,cp),cin,dm;
set C2 = BitGFA2Circ (GFA1AdderOutput ap,bm,cp),cin,dm;
let a1, a2, a3 be Element of BOOLEAN ; :: thesis: ( a1 = s . ap & a2 = s . bm & a3 = s . cp implies ( (Following s,2) . (BitFTA1CarryOutput ap,bm,cp,dm,cin) = ((a1 '&' ('not' a2)) 'or' (('not' a2) '&' a3)) 'or' (a3 '&' a1) & (Following s,2) . (BitFTA1AdderOutputI ap,bm,cp,dm,cin) = 'not' ((a1 'xor' ('not' a2)) 'xor' a3) ) )
assume A1: ( a1 = s . ap & a2 = s . bm & a3 = s . cp ) ; :: thesis: ( (Following s,2) . (BitFTA1CarryOutput ap,bm,cp,dm,cin) = ((a1 '&' ('not' a2)) 'or' (('not' a2) '&' a3)) 'or' (a3 '&' a1) & (Following s,2) . (BitFTA1AdderOutputI ap,bm,cp,dm,cin) = 'not' ((a1 'xor' ('not' a2)) 'xor' a3) )
A2: ( ap in the carrier of (BitGFA1Str ap,bm,cp) & bm in the carrier of (BitGFA1Str ap,bm,cp) & cp in the carrier of (BitGFA1Str ap,bm,cp) ) by GFACIRC1:81;
reconsider s1 = s | the carrier of (BitGFA1Str ap,bm,cp) as State of (BitGFA1Circ ap,bm,cp) by FACIRC_1:26;
reconsider t = s as State of ((BitGFA1Circ ap,bm,cp) +* (BitGFA2Circ (GFA1AdderOutput ap,bm,cp),cin,dm)) ;
A3: ( GFA1AdderOutput ap,bm,cp in the carrier of (BitGFA1Str ap,bm,cp) & GFA1CarryOutput ap,bm,cp in the carrier of (BitGFA1Str ap,bm,cp) ) by GFACIRC1:81;
A4: InputVertices (BitGFA1Str ap,bm,cp) misses InnerVertices (BitGFA2Str (GFA1AdderOutput ap,bm,cp),cin,dm) by LemmaX22;
dom s1 = the carrier of (BitGFA1Str ap,bm,cp) by CIRCUIT1:4;
then A5: ( a1 = s1 . ap & a2 = s1 . bm & a3 = s1 . cp ) by A1, A2, FUNCT_1:70;
then ( (Following t,2) . (GFA1CarryOutput ap,bm,cp) = (Following s1,2) . (GFA1CarryOutput ap,bm,cp) & (Following s1,2) . (GFA1CarryOutput ap,bm,cp) = ((a1 '&' ('not' a2)) 'or' (('not' a2) '&' a3)) 'or' (a3 '&' a1) ) by A3, A4, FACIRC_1:32, GFACIRC1:84;
hence (Following s,2) . (BitFTA1CarryOutput ap,bm,cp,dm,cin) = ((a1 '&' ('not' a2)) 'or' (('not' a2) '&' a3)) 'or' (a3 '&' a1) ; :: thesis: (Following s,2) . (BitFTA1AdderOutputI ap,bm,cp,dm,cin) = 'not' ((a1 'xor' ('not' a2)) 'xor' a3)
( (Following t,2) . (GFA1AdderOutput ap,bm,cp) = (Following s1,2) . (GFA1AdderOutput ap,bm,cp) & (Following s1,2) . (GFA1AdderOutput ap,bm,cp) = 'not' ((a1 'xor' ('not' a2)) 'xor' a3) ) by A3, A4, A5, FACIRC_1:32, GFACIRC1:84;
hence (Following s,2) . (BitFTA1AdderOutputI ap,bm,cp,dm,cin) = 'not' ((a1 'xor' ('not' a2)) 'xor' a3) ; :: thesis: verum