let s be State of ; for I being Program of
for a being read-write Int-Location st I is_closed_onInit s & I is_halting_onInit s & s . a > 0 holds
for k being Element of NAT st k <= (LifeSpan (s +* (Initialized I))) + 3 holds
IC (Computation (s +* (Initialized (while>0 a,I))),k) in dom (while>0 a,I)
let I be Program of ; for a being read-write Int-Location st I is_closed_onInit s & I is_halting_onInit s & s . a > 0 holds
for k being Element of NAT st k <= (LifeSpan (s +* (Initialized I))) + 3 holds
IC (Computation (s +* (Initialized (while>0 a,I))),k) in dom (while>0 a,I)
let a be read-write Int-Location ; ( I is_closed_onInit s & I is_halting_onInit s & s . a > 0 implies for k being Element of NAT st k <= (LifeSpan (s +* (Initialized I))) + 3 holds
IC (Computation (s +* (Initialized (while>0 a,I))),k) in dom (while>0 a,I) )
set s0 = Initialize s;
set IA = I +* (Start-At (insloc 0 ));
assume A1:
I is_closed_onInit s
; ( not I is_halting_onInit s or not s . a > 0 or for k being Element of NAT st k <= (LifeSpan (s +* (Initialized I))) + 3 holds
IC (Computation (s +* (Initialized (while>0 a,I))),k) in dom (while>0 a,I) )
then A2:
I is_closed_on Initialize s
by SCMFSA7B:def 7;
assume
I is_halting_onInit s
; ( not s . a > 0 or for k being Element of NAT st k <= (LifeSpan (s +* (Initialized I))) + 3 holds
IC (Computation (s +* (Initialized (while>0 a,I))),k) in dom (while>0 a,I) )
then X:
ProgramPart (s +* (Initialized I)) halts_on s +* (Initialized I)
by SCM_HALT:def 5;
s +* (Initialized I) = (Initialize s) +* (I +* (Start-At (insloc 0 )))
by SCMFSA8A:13;
then
ProgramPart ((Initialize s) +* (I +* (Start-At (insloc 0 )))) halts_on (Initialize s) +* (I +* (Start-At (insloc 0 )))
by SCMFSA8A:13, X;
then A3:
I is_halting_on Initialize s
by SCMFSA7B:def 8;
assume
s . a > 0
; for k being Element of NAT st k <= (LifeSpan (s +* (Initialized I))) + 3 holds
IC (Computation (s +* (Initialized (while>0 a,I))),k) in dom (while>0 a,I)
then A4:
(Initialize s) . a > 0
by SCMFSA6C:3;
hereby verum
let k be
Element of
NAT ;
( k <= (LifeSpan (s +* (Initialized I))) + 3 implies IC (Computation (s +* (Initialized (while>0 a,I))),k) in dom (while>0 a,I) )assume
k <= (LifeSpan (s +* (Initialized I))) + 3
;
IC (Computation (s +* (Initialized (while>0 a,I))),k) in dom (while>0 a,I)then
k <= (LifeSpan ((Initialize s) +* (I +* (Start-At (insloc 0 ))))) + 3
by SCMFSA8A:13;
then
IC (Computation ((Initialize s) +* ((while>0 a,I) +* (Start-At (insloc 0 )))),k) in dom (while>0 a,I)
by A2, A3, A4, SCMFSA_9:47;
hence
IC (Computation (s +* (Initialized (while>0 a,I))),k) in dom (while>0 a,I)
by SCMFSA8A:13;
verum
end;