let am, bm, cm, dm be non pair set ; :: thesis: for cin being set
for s being State of (BitFTA3Circ am,bm,cm,dm,cin)
for a123, a4, a5 being Element of BOOLEAN st a123 = s . (GFA3AdderOutput am,bm,cm) & a4 = s . dm & a5 = s . cin holds
( (Following s) . [<*(GFA3AdderOutput am,bm,cm),cin*>,and2b ] = ('not' a123) '&' ('not' a5) & (Following s) . [<*cin,dm*>,and2b ] = ('not' a5) '&' ('not' a4) & (Following s) . [<*dm,(GFA3AdderOutput am,bm,cm)*>,and2b ] = ('not' a4) '&' ('not' a123) )
let cin be set ; :: thesis: for s being State of (BitFTA3Circ am,bm,cm,dm,cin)
for a123, a4, a5 being Element of BOOLEAN st a123 = s . (GFA3AdderOutput am,bm,cm) & a4 = s . dm & a5 = s . cin holds
( (Following s) . [<*(GFA3AdderOutput am,bm,cm),cin*>,and2b ] = ('not' a123) '&' ('not' a5) & (Following s) . [<*cin,dm*>,and2b ] = ('not' a5) '&' ('not' a4) & (Following s) . [<*dm,(GFA3AdderOutput am,bm,cm)*>,and2b ] = ('not' a4) '&' ('not' a123) )
set S = BitFTA3Str am,bm,cm,dm,cin;
set C = BitFTA3Circ am,bm,cm,dm,cin;
set A1 = GFA3AdderOutput am,bm,cm;
set S2 = BitGFA3Str (GFA3AdderOutput am,bm,cm),cin,dm;
set C2 = BitGFA3Circ (GFA3AdderOutput am,bm,cm),cin,dm;
set A1cin = [<*(GFA3AdderOutput am,bm,cm),cin*>,and2b ];
set cindm = [<*cin,dm*>,and2b ];
set dmA1 = [<*dm,(GFA3AdderOutput am,bm,cm)*>,and2b ];
let s be State of (BitFTA3Circ am,bm,cm,dm,cin); :: thesis: for a123, a4, a5 being Element of BOOLEAN st a123 = s . (GFA3AdderOutput am,bm,cm) & a4 = s . dm & a5 = s . cin holds
( (Following s) . [<*(GFA3AdderOutput am,bm,cm),cin*>,and2b ] = ('not' a123) '&' ('not' a5) & (Following s) . [<*cin,dm*>,and2b ] = ('not' a5) '&' ('not' a4) & (Following s) . [<*dm,(GFA3AdderOutput am,bm,cm)*>,and2b ] = ('not' a4) '&' ('not' a123) )
let a123, a4, a5 be Element of BOOLEAN ; :: thesis: ( a123 = s . (GFA3AdderOutput am,bm,cm) & a4 = s . dm & a5 = s . cin implies ( (Following s) . [<*(GFA3AdderOutput am,bm,cm),cin*>,and2b ] = ('not' a123) '&' ('not' a5) & (Following s) . [<*cin,dm*>,and2b ] = ('not' a5) '&' ('not' a4) & (Following s) . [<*dm,(GFA3AdderOutput am,bm,cm)*>,and2b ] = ('not' a4) '&' ('not' a123) ) )
assume A1: ( a123 = s . (GFA3AdderOutput am,bm,cm) & a4 = s . dm & a5 = s . cin ) ; :: thesis: ( (Following s) . [<*(GFA3AdderOutput am,bm,cm),cin*>,and2b ] = ('not' a123) '&' ('not' a5) & (Following s) . [<*cin,dm*>,and2b ] = ('not' a5) '&' ('not' a4) & (Following s) . [<*dm,(GFA3AdderOutput am,bm,cm)*>,and2b ] = ('not' a4) '&' ('not' a123) )
A2: ( GFA3AdderOutput am,bm,cm in the carrier of (BitFTA3Str am,bm,cm,dm,cin) & dm in the carrier of (BitFTA3Str am,bm,cm,dm,cin) & cin in the carrier of (BitFTA3Str am,bm,cm,dm,cin) ) by ThFTA3S6;
A3: dom s = the carrier of (BitFTA3Str am,bm,cm,dm,cin) by CIRCUIT1:4;
InnerVertices (BitFTA3Str am,bm,cm,dm,cin) = the carrier' of (BitFTA3Str am,bm,cm,dm,cin) by FACIRC_1:37;
then A4: ( [<*(GFA3AdderOutput am,bm,cm),cin*>,and2b ] in the carrier' of (BitFTA3Str am,bm,cm,dm,cin) & [<*cin,dm*>,and2b ] in the carrier' of (BitFTA3Str am,bm,cm,dm,cin) & [<*dm,(GFA3AdderOutput am,bm,cm)*>,and2b ] in the carrier' of (BitFTA3Str am,bm,cm,dm,cin) ) by ThFTA3S7;
hence (Following s) . [<*(GFA3AdderOutput am,bm,cm),cin*>,and2b ] = and2b . (s * <*(GFA3AdderOutput am,bm,cm),cin*>) by FACIRC_1:35
.= and2b . <*a123,a5*> by A1, A2, A3, FINSEQ_2:145
.= ('not' a123) '&' ('not' a5) by TWOSCOMP:def 3 ;
:: thesis: ( (Following s) . [<*cin,dm*>,and2b ] = ('not' a5) '&' ('not' a4) & (Following s) . [<*dm,(GFA3AdderOutput am,bm,cm)*>,and2b ] = ('not' a4) '&' ('not' a123) )
thus (Following s) . [<*cin,dm*>,and2b ] = and2b . (s * <*cin,dm*>) by A4, FACIRC_1:35
.= and2b . <*a5,a4*> by A1, A2, A3, FINSEQ_2:145
.= ('not' a5) '&' ('not' a4) by TWOSCOMP:def 3 ; :: thesis: (Following s) . [<*dm,(GFA3AdderOutput am,bm,cm)*>,and2b ] = ('not' a4) '&' ('not' a123)
thus (Following s) . [<*dm,(GFA3AdderOutput am,bm,cm)*>,and2b ] = and2b . (s * <*dm,(GFA3AdderOutput am,bm,cm)*>) by A4, FACIRC_1:35
.= and2b . <*a4,a123*> by A1, A2, A3, FINSEQ_2:145
.= ('not' a4) '&' ('not' a123) by TWOSCOMP:def 3 ; :: thesis: verum