let s be State of ; :: thesis: for I being shiftable No-StopCode Program of
for a being Int_position
for i, c being Integer
for X, Y being set
for f being Function of product the Object-Kind of SCMPDS , NAT st card I > 0 & ( for t being State of st f . (Dstate t) = 0 holds
t . (DataLoc (s . a),i) <= 0 ) & ( for x being Int_position st x in X holds
s . x >= c + (s . (DataLoc (s . a),i)) ) & ( for t being State of st ( for x being Int_position st x in X holds
t . x >= c + (t . (DataLoc (s . a),i)) ) & ( for x being Int_position st x in Y holds
t . x = s . x ) & t . a = s . a & t . (DataLoc (s . a),i) > 0 holds
( (IExec I,t) . a = t . a & I is_closed_on t & I is_halting_on t & f . (Dstate (IExec I,t)) < f . (Dstate t) & ( for x being Int_position st x in X holds
(IExec I,t) . x >= c + ((IExec I,t) . (DataLoc (s . a),i)) ) & ( for x being Int_position st x in Y holds
(IExec I,t) . x = t . x ) ) ) holds
( while>0 a,i,I is_closed_on s & while>0 a,i,I is_halting_on s )

let I be shiftable No-StopCode Program of ; :: thesis: for a being Int_position
for i, c being Integer
for X, Y being set
for f being Function of product the Object-Kind of SCMPDS , NAT st card I > 0 & ( for t being State of st f . (Dstate t) = 0 holds
t . (DataLoc (s . a),i) <= 0 ) & ( for x being Int_position st x in X holds
s . x >= c + (s . (DataLoc (s . a),i)) ) & ( for t being State of st ( for x being Int_position st x in X holds
t . x >= c + (t . (DataLoc (s . a),i)) ) & ( for x being Int_position st x in Y holds
t . x = s . x ) & t . a = s . a & t . (DataLoc (s . a),i) > 0 holds
( (IExec I,t) . a = t . a & I is_closed_on t & I is_halting_on t & f . (Dstate (IExec I,t)) < f . (Dstate t) & ( for x being Int_position st x in X holds
(IExec I,t) . x >= c + ((IExec I,t) . (DataLoc (s . a),i)) ) & ( for x being Int_position st x in Y holds
(IExec I,t) . x = t . x ) ) ) holds
( while>0 a,i,I is_closed_on s & while>0 a,i,I is_halting_on s )

let a be Int_position ; :: thesis: for i, c being Integer
for X, Y being set
for f being Function of product the Object-Kind of SCMPDS , NAT st card I > 0 & ( for t being State of st f . (Dstate t) = 0 holds
t . (DataLoc (s . a),i) <= 0 ) & ( for x being Int_position st x in X holds
s . x >= c + (s . (DataLoc (s . a),i)) ) & ( for t being State of st ( for x being Int_position st x in X holds
t . x >= c + (t . (DataLoc (s . a),i)) ) & ( for x being Int_position st x in Y holds
t . x = s . x ) & t . a = s . a & t . (DataLoc (s . a),i) > 0 holds
( (IExec I,t) . a = t . a & I is_closed_on t & I is_halting_on t & f . (Dstate (IExec I,t)) < f . (Dstate t) & ( for x being Int_position st x in X holds
(IExec I,t) . x >= c + ((IExec I,t) . (DataLoc (s . a),i)) ) & ( for x being Int_position st x in Y holds
(IExec I,t) . x = t . x ) ) ) holds
( while>0 a,i,I is_closed_on s & while>0 a,i,I is_halting_on s )

let i, c be Integer; :: thesis: for X, Y being set
for f being Function of product the Object-Kind of SCMPDS , NAT st card I > 0 & ( for t being State of st f . (Dstate t) = 0 holds
t . (DataLoc (s . a),i) <= 0 ) & ( for x being Int_position st x in X holds
s . x >= c + (s . (DataLoc (s . a),i)) ) & ( for t being State of st ( for x being Int_position st x in X holds
t . x >= c + (t . (DataLoc (s . a),i)) ) & ( for x being Int_position st x in Y holds
t . x = s . x ) & t . a = s . a & t . (DataLoc (s . a),i) > 0 holds
( (IExec I,t) . a = t . a & I is_closed_on t & I is_halting_on t & f . (Dstate (IExec I,t)) < f . (Dstate t) & ( for x being Int_position st x in X holds
(IExec I,t) . x >= c + ((IExec I,t) . (DataLoc (s . a),i)) ) & ( for x being Int_position st x in Y holds
(IExec I,t) . x = t . x ) ) ) holds
( while>0 a,i,I is_closed_on s & while>0 a,i,I is_halting_on s )

let X, Y be set ; :: thesis: for f being Function of product the Object-Kind of SCMPDS , NAT st card I > 0 & ( for t being State of st f . (Dstate t) = 0 holds
t . (DataLoc (s . a),i) <= 0 ) & ( for x being Int_position st x in X holds
s . x >= c + (s . (DataLoc (s . a),i)) ) & ( for t being State of st ( for x being Int_position st x in X holds
t . x >= c + (t . (DataLoc (s . a),i)) ) & ( for x being Int_position st x in Y holds
t . x = s . x ) & t . a = s . a & t . (DataLoc (s . a),i) > 0 holds
( (IExec I,t) . a = t . a & I is_closed_on t & I is_halting_on t & f . (Dstate (IExec I,t)) < f . (Dstate t) & ( for x being Int_position st x in X holds
(IExec I,t) . x >= c + ((IExec I,t) . (DataLoc (s . a),i)) ) & ( for x being Int_position st x in Y holds
(IExec I,t) . x = t . x ) ) ) holds
( while>0 a,i,I is_closed_on s & while>0 a,i,I is_halting_on s )

let f be Function of product the Object-Kind of SCMPDS , NAT ; :: thesis: ( card I > 0 & ( for t being State of st f . (Dstate t) = 0 holds
t . (DataLoc (s . a),i) <= 0 ) & ( for x being Int_position st x in X holds
s . x >= c + (s . (DataLoc (s . a),i)) ) & ( for t being State of st ( for x being Int_position st x in X holds
t . x >= c + (t . (DataLoc (s . a),i)) ) & ( for x being Int_position st x in Y holds
t . x = s . x ) & t . a = s . a & t . (DataLoc (s . a),i) > 0 holds
( (IExec I,t) . a = t . a & I is_closed_on t & I is_halting_on t & f . (Dstate (IExec I,t)) < f . (Dstate t) & ( for x being Int_position st x in X holds
(IExec I,t) . x >= c + ((IExec I,t) . (DataLoc (s . a),i)) ) & ( for x being Int_position st x in Y holds
(IExec I,t) . x = t . x ) ) ) implies ( while>0 a,i,I is_closed_on s & while>0 a,i,I is_halting_on s ) )

set b = DataLoc (s . a),i;
set WHL = while>0 a,i,I;
set pWHL = stop (while>0 a,i,I);
set iWHL = Initialized (stop (while>0 a,i,I));
set pI = stop I;
set IsI = Initialized (stop I);
set i1 = a,i <=0_goto ((card I) + 2);
set i2 = goto (- ((card I) + 1));
assume A1: card I > 0 ; :: thesis: ( ex t being State of st
( f . (Dstate t) = 0 & not t . (DataLoc (s . a),i) <= 0 ) or ex x being Int_position st
( x in X & not s . x >= c + (s . (DataLoc (s . a),i)) ) or ex t being State of st
( ( for x being Int_position st x in X holds
t . x >= c + (t . (DataLoc (s . a),i)) ) & ( for x being Int_position st x in Y holds
t . x = s . x ) & t . a = s . a & t . (DataLoc (s . a),i) > 0 & not ( (IExec I,t) . a = t . a & I is_closed_on t & I is_halting_on t & f . (Dstate (IExec I,t)) < f . (Dstate t) & ( for x being Int_position st x in X holds
(IExec I,t) . x >= c + ((IExec I,t) . (DataLoc (s . a),i)) ) & ( for x being Int_position st x in Y holds
(IExec I,t) . x = t . x ) ) ) or ( while>0 a,i,I is_closed_on s & while>0 a,i,I is_halting_on s ) )

defpred S1[ Element of NAT ] means for t being State of st f . (Dstate t) <= $1 & ( for x being Int_position st x in X holds
t . x >= c + (t . (DataLoc (s . a),i)) ) & ( for x being Int_position st x in Y holds
t . x = s . x ) & t . a = s . a holds
( while>0 a,i,I is_closed_on t & while>0 a,i,I is_halting_on t );
assume A2: for t being State of st f . (Dstate t) = 0 holds
t . (DataLoc (s . a),i) <= 0 ; :: thesis: ( ex x being Int_position st
( x in X & not s . x >= c + (s . (DataLoc (s . a),i)) ) or ex t being State of st
( ( for x being Int_position st x in X holds
t . x >= c + (t . (DataLoc (s . a),i)) ) & ( for x being Int_position st x in Y holds
t . x = s . x ) & t . a = s . a & t . (DataLoc (s . a),i) > 0 & not ( (IExec I,t) . a = t . a & I is_closed_on t & I is_halting_on t & f . (Dstate (IExec I,t)) < f . (Dstate t) & ( for x being Int_position st x in X holds
(IExec I,t) . x >= c + ((IExec I,t) . (DataLoc (s . a),i)) ) & ( for x being Int_position st x in Y holds
(IExec I,t) . x = t . x ) ) ) or ( while>0 a,i,I is_closed_on s & while>0 a,i,I is_halting_on s ) )

assume A3: for x being Int_position st x in X holds
s . x >= c + (s . (DataLoc (s . a),i)) ; :: thesis: ( ex t being State of st
( ( for x being Int_position st x in X holds
t . x >= c + (t . (DataLoc (s . a),i)) ) & ( for x being Int_position st x in Y holds
t . x = s . x ) & t . a = s . a & t . (DataLoc (s . a),i) > 0 & not ( (IExec I,t) . a = t . a & I is_closed_on t & I is_halting_on t & f . (Dstate (IExec I,t)) < f . (Dstate t) & ( for x being Int_position st x in X holds
(IExec I,t) . x >= c + ((IExec I,t) . (DataLoc (s . a),i)) ) & ( for x being Int_position st x in Y holds
(IExec I,t) . x = t . x ) ) ) or ( while>0 a,i,I is_closed_on s & while>0 a,i,I is_halting_on s ) )

assume A4: for t being State of st ( for x being Int_position st x in X holds
t . x >= c + (t . (DataLoc (s . a),i)) ) & ( for x being Int_position st x in Y holds
t . x = s . x ) & t . a = s . a & t . (DataLoc (s . a),i) > 0 holds
( (IExec I,t) . a = t . a & I is_closed_on t & I is_halting_on t & f . (Dstate (IExec I,t)) < f . (Dstate t) & ( for x being Int_position st x in X holds
(IExec I,t) . x >= c + ((IExec I,t) . (DataLoc (s . a),i)) ) & ( for x being Int_position st x in Y holds
(IExec I,t) . x = t . x ) ) ; :: thesis: ( while>0 a,i,I is_closed_on s & while>0 a,i,I is_halting_on s )
A5: for k being Element of NAT st S1[k] holds
S1[k + 1]
proof
let k be Element of NAT ; :: thesis: ( S1[k] implies S1[k + 1] )
assume A6: S1[k] ; :: thesis: S1[k + 1]
now
let t be State of ; :: thesis: ( f . (Dstate t) <= k + 1 & ( for x being Int_position st x in X holds
t . x >= c + (t . (DataLoc (s . a),i)) ) & ( for x being Int_position st x in Y holds
t . x = s . x ) & t . a = s . a implies ( while>0 a,i,I is_closed_on b1 & while>0 a,i,I is_halting_on b1 ) )

assume A7: f . (Dstate t) <= k + 1 ; :: thesis: ( ( for x being Int_position st x in X holds
t . x >= c + (t . (DataLoc (s . a),i)) ) & ( for x being Int_position st x in Y holds
t . x = s . x ) & t . a = s . a implies ( while>0 a,i,I is_closed_on b1 & while>0 a,i,I is_halting_on b1 ) )

assume A8: for x being Int_position st x in X holds
t . x >= c + (t . (DataLoc (s . a),i)) ; :: thesis: ( ( for x being Int_position st x in Y holds
t . x = s . x ) & t . a = s . a implies ( while>0 a,i,I is_closed_on b1 & while>0 a,i,I is_halting_on b1 ) )

assume A9: for x being Int_position st x in Y holds
t . x = s . x ; :: thesis: ( t . a = s . a implies ( while>0 a,i,I is_closed_on b1 & while>0 a,i,I is_halting_on b1 ) )
assume A10: t . a = s . a ; :: thesis: ( while>0 a,i,I is_closed_on b1 & while>0 a,i,I is_halting_on b1 )
per cases ( t . (DataLoc (s . a),i) <= 0 or t . (DataLoc (s . a),i) > 0 ) ;
suppose A11: t . (DataLoc (s . a),i) > 0 ; :: thesis: ( while>0 a,i,I is_closed_on b1 & while>0 a,i,I is_halting_on b1 )
A12: dom (t | NAT ) = NAT by SCMPDS_6:1;
A13: now
assume a in dom (t | NAT ) ; :: thesis: contradiction
then reconsider l = a as Instruction-Location of SCMPDS by A12, AMI_1:def 4;
l = a ;
hence contradiction by SCMPDS_2:53; :: thesis: verum
end;
A14: (IExec I,t) . a = t . a by A4, A8, A9, A10, A11;
A15: inspos 0 in dom (stop (while>0 a,i,I)) by SCMPDS_4:75;
A16: dom (t | NAT ) = NAT by SCMPDS_6:1;
A17: not DataLoc (s . a),i in dom (Initialized (stop (while>0 a,i,I))) by SCMPDS_4:31;
A18: while>0 a,i,I = (a,i <=0_goto ((card I) + 2)) ';' (I ';' (goto (- ((card I) + 1)))) by SCMPDS_4:51;
set t2 = t +* (Initialized (stop I));
set t3 = t +* (Initialized (stop (while>0 a,i,I)));
set t4 = Computation (t +* (Initialized (stop (while>0 a,i,I)))),1;
A19: Initialized (stop I) c= t +* (Initialized (stop I)) by FUNCT_4:26;
A20: Computation (t +* (Initialized (stop (while>0 a,i,I)))),(0 + 1) = Following (Computation (t +* (Initialized (stop (while>0 a,i,I)))),0 ) by AMI_1:14
.= Following (t +* (Initialized (stop (while>0 a,i,I)))) by AMI_1:13
.= Exec (a,i <=0_goto ((card I) + 2)),(t +* (Initialized (stop (while>0 a,i,I)))) by A18, SCMPDS_6:22 ;
A21: DataPart (t +* (Initialized (stop I))) = DataPart (t +* (Initialized (stop (while>0 a,i,I)))) by SCMPDS_4:24, SCMPDS_4:36;
now
let a be Int_position ; :: thesis: (t +* (Initialized (stop I))) . a = (Computation (t +* (Initialized (stop (while>0 a,i,I)))),1) . a
thus (t +* (Initialized (stop I))) . a = (t +* (Initialized (stop (while>0 a,i,I)))) . a by A21, SCMPDS_4:23
.= (Computation (t +* (Initialized (stop (while>0 a,i,I)))),1) . a by A20, SCMPDS_2:68 ; :: thesis: verum
end;
then A22: DataPart (t +* (Initialized (stop I))) = DataPart (Computation (t +* (Initialized (stop (while>0 a,i,I)))),1) by SCMPDS_4:23;
( while>0 a,i,I c= Initialized (stop (while>0 a,i,I)) & Initialized (stop (while>0 a,i,I)) c= t +* (Initialized (stop (while>0 a,i,I))) ) by FUNCT_4:26, SCMPDS_6:17;
then A23: while>0 a,i,I c= t +* (Initialized (stop (while>0 a,i,I))) by XBOOLE_1:1;
Shift I,1 c= while>0 a,i,I by Lm4;
then Shift I,1 c= t +* (Initialized (stop (while>0 a,i,I))) by A23, XBOOLE_1:1;
then A24: Shift I,1 c= Computation (t +* (Initialized (stop (while>0 a,i,I)))),1 by AMI_1:81;
A25: IExec I,t = (Result (t +* (Initialized (stop I)))) +* (t | NAT ) by SCMPDS_4:def 8;
set m2 = LifeSpan (t +* (Initialized (stop I)));
set t5 = Computation (Computation (t +* (Initialized (stop (while>0 a,i,I)))),1),(LifeSpan (t +* (Initialized (stop I))));
set l1 = inspos ((card I) + 1);
A26: IC (t +* (Initialized (stop (while>0 a,i,I)))) = inspos 0 by SCMPDS_6:21;
set m3 = (LifeSpan (t +* (Initialized (stop I)))) + 1;
set t6 = Computation (t +* (Initialized (stop (while>0 a,i,I)))),((LifeSpan (t +* (Initialized (stop I)))) + 1);
set t7 = Computation (t +* (Initialized (stop (while>0 a,i,I)))),(((LifeSpan (t +* (Initialized (stop I)))) + 1) + 1);
(card I) + 1 < (card I) + 2 by XREAL_1:8;
then A27: inspos ((card I) + 1) in dom (while>0 a,i,I) by Th18;
A28: I is_closed_on t by A4, A8, A9, A10, A11;
then A29: I is_closed_on t +* (Initialized (stop I)) by SCMPDS_6:38;
I is_halting_on t by A4, A8, A9, A10, A11;
then A30: ProgramPart (t +* (Initialized (stop I))) halts_on t +* (Initialized (stop I)) by SCMPDS_6:def 3;
t +* (Initialized (stop I)) = (t +* (Initialized (stop I))) +* (Initialized (stop I)) by A19, FUNCT_4:79;
then ProgramPart ((t +* (Initialized (stop I))) +* (Initialized (stop I))) halts_on (t +* (Initialized (stop I))) +* (Initialized (stop I)) by A19, FUNCT_4:79, A30;
then A31: I is_halting_on t +* (Initialized (stop I)) by SCMPDS_6:def 3;
not a in dom (Initialized (stop (while>0 a,i,I))) by SCMPDS_4:31;
then (t +* (Initialized (stop (while>0 a,i,I)))) . (DataLoc ((t +* (Initialized (stop (while>0 a,i,I)))) . a),i) = (t +* (Initialized (stop (while>0 a,i,I)))) . (DataLoc (s . a),i) by A10, FUNCT_4:12
.= t . (DataLoc (s . a),i) by A17, FUNCT_4:12 ;
then A32: IC (Computation (t +* (Initialized (stop (while>0 a,i,I)))),1) = Next (IC (t +* (Initialized (stop (while>0 a,i,I))))) by A11, A20, SCMPDS_2:68
.= inspos (0 + 1) by A26 ;
then A33: IC (Computation (Computation (t +* (Initialized (stop (while>0 a,i,I)))),1),(LifeSpan (t +* (Initialized (stop I))))) = inspos ((card I) + 1) by A1, A19, A31, A29, A22, A24, SCMPDS_7:36;
A34: Computation (t +* (Initialized (stop (while>0 a,i,I)))),((LifeSpan (t +* (Initialized (stop I)))) + 1) = Computation (Computation (t +* (Initialized (stop (while>0 a,i,I)))),1),(LifeSpan (t +* (Initialized (stop I)))) by AMI_1:51;
then A35: CurInstr (Computation (t +* (Initialized (stop (while>0 a,i,I)))),((LifeSpan (t +* (Initialized (stop I)))) + 1)) = (Computation (Computation (t +* (Initialized (stop (while>0 a,i,I)))),1),(LifeSpan (t +* (Initialized (stop I))))) . (inspos ((card I) + 1)) by A1, A19, A31, A29, A32, A22, A24, SCMPDS_7:36
.= (Computation (t +* (Initialized (stop (while>0 a,i,I)))),1) . (inspos ((card I) + 1)) by AMI_1:54
.= (t +* (Initialized (stop (while>0 a,i,I)))) . (inspos ((card I) + 1)) by AMI_1:54
.= (while>0 a,i,I) . (inspos ((card I) + 1)) by A27, A23, GRFUNC_1:8
.= goto (- ((card I) + 1)) by Th19 ;
A36: Computation (t +* (Initialized (stop (while>0 a,i,I)))),(((LifeSpan (t +* (Initialized (stop I)))) + 1) + 1) = Following (Computation (t +* (Initialized (stop (while>0 a,i,I)))),((LifeSpan (t +* (Initialized (stop I)))) + 1)) by AMI_1:14
.= Exec (goto (- ((card I) + 1))),(Computation (t +* (Initialized (stop (while>0 a,i,I)))),((LifeSpan (t +* (Initialized (stop I)))) + 1)) by A35 ;
then IC (Computation (t +* (Initialized (stop (while>0 a,i,I)))),(((LifeSpan (t +* (Initialized (stop I)))) + 1) + 1)) = ICplusConst (Computation (t +* (Initialized (stop (while>0 a,i,I)))),((LifeSpan (t +* (Initialized (stop I)))) + 1)),(0 - ((card I) + 1)) by SCMPDS_2:66
.= inspos 0 by A33, A34, SCMPDS_7:1 ;
then A37: (Computation (t +* (Initialized (stop (while>0 a,i,I)))),(((LifeSpan (t +* (Initialized (stop I)))) + 1) + 1)) +* (Initialized (stop (while>0 a,i,I))) = Computation (t +* (Initialized (stop (while>0 a,i,I)))),(((LifeSpan (t +* (Initialized (stop I)))) + 1) + 1) by SCMPDS_7:37;
A38: DataPart (Computation (t +* (Initialized (stop I))),(LifeSpan (t +* (Initialized (stop I))))) = DataPart (Computation (Computation (t +* (Initialized (stop (while>0 a,i,I)))),1),(LifeSpan (t +* (Initialized (stop I))))) by A1, A19, A31, A29, A32, A22, A24, SCMPDS_7:36;
then A39: DataPart (Computation (Computation (t +* (Initialized (stop (while>0 a,i,I)))),1),(LifeSpan (t +* (Initialized (stop I))))) = DataPart (Result (t +* (Initialized (stop I)))) by A30, AMI_1:122
.= DataPart ((Result (t +* (Initialized (stop I)))) +* (t | NAT )) by A16, AMI_2:29, FUNCT_4:76, SCMPDS_2:100
.= DataPart (IExec I,t) by SCMPDS_4:def 8 ;
A40: now
let x be Int_position ; :: thesis: ( x in Y implies (Computation (t +* (Initialized (stop (while>0 a,i,I)))),(((LifeSpan (t +* (Initialized (stop I)))) + 1) + 1)) . x = s . x )
assume A41: x in Y ; :: thesis: (Computation (t +* (Initialized (stop (while>0 a,i,I)))),(((LifeSpan (t +* (Initialized (stop I)))) + 1) + 1)) . x = s . x
thus (Computation (t +* (Initialized (stop (while>0 a,i,I)))),(((LifeSpan (t +* (Initialized (stop I)))) + 1) + 1)) . x = (Computation (Computation (t +* (Initialized (stop (while>0 a,i,I)))),1),(LifeSpan (t +* (Initialized (stop I))))) . x by A34, A36, SCMPDS_2:66
.= (IExec I,t) . x by A39, SCMPDS_3:4
.= t . x by A4, A8, A9, A10, A11, A41
.= s . x by A9, A41 ; :: thesis: verum
end;
InsCode (goto (- ((card I) + 1))) = 0 by SCMPDS_2:21;
then InsCode (goto (- ((card I) + 1))) in {0 ,4,5,6} by ENUMSET1:def 2;
then A42: Dstate (Computation (t +* (Initialized (stop (while>0 a,i,I)))),(((LifeSpan (t +* (Initialized (stop I)))) + 1) + 1)) = Dstate (Computation (t +* (Initialized (stop (while>0 a,i,I)))),((LifeSpan (t +* (Initialized (stop I)))) + 1)) by A36, Th3
.= Dstate (IExec I,t) by A39, A34, Th2 ;
A43: now
f . (Dstate (IExec I,t)) < f . (Dstate t) by A4, A8, A9, A10, A11;
then A44: f . (Dstate (Computation (t +* (Initialized (stop (while>0 a,i,I)))),(((LifeSpan (t +* (Initialized (stop I)))) + 1) + 1))) < k + 1 by A7, A42, XXREAL_0:2;
assume f . (Dstate (Computation (t +* (Initialized (stop (while>0 a,i,I)))),(((LifeSpan (t +* (Initialized (stop I)))) + 1) + 1))) > k ; :: thesis: contradiction
hence contradiction by A44, INT_1:20; :: thesis: verum
end;
A45: (Computation (t +* (Initialized (stop (while>0 a,i,I)))),(((LifeSpan (t +* (Initialized (stop I)))) + 1) + 1)) . (DataLoc (s . a),i) = (Computation (Computation (t +* (Initialized (stop (while>0 a,i,I)))),1),(LifeSpan (t +* (Initialized (stop I))))) . (DataLoc (s . a),i) by A34, A36, SCMPDS_2:66
.= (IExec I,t) . (DataLoc (s . a),i) by A39, SCMPDS_3:4 ;
A46: now
let x be Int_position ; :: thesis: ( x in X implies (Computation (t +* (Initialized (stop (while>0 a,i,I)))),(((LifeSpan (t +* (Initialized (stop I)))) + 1) + 1)) . x >= c + ((Computation (t +* (Initialized (stop (while>0 a,i,I)))),(((LifeSpan (t +* (Initialized (stop I)))) + 1) + 1)) . (DataLoc (s . a),i)) )
assume A47: x in X ; :: thesis: (Computation (t +* (Initialized (stop (while>0 a,i,I)))),(((LifeSpan (t +* (Initialized (stop I)))) + 1) + 1)) . x >= c + ((Computation (t +* (Initialized (stop (while>0 a,i,I)))),(((LifeSpan (t +* (Initialized (stop I)))) + 1) + 1)) . (DataLoc (s . a),i))
(Computation (t +* (Initialized (stop (while>0 a,i,I)))),(((LifeSpan (t +* (Initialized (stop I)))) + 1) + 1)) . x = (Computation (Computation (t +* (Initialized (stop (while>0 a,i,I)))),1),(LifeSpan (t +* (Initialized (stop I))))) . x by A34, A36, SCMPDS_2:66
.= (IExec I,t) . x by A39, SCMPDS_3:4 ;
hence (Computation (t +* (Initialized (stop (while>0 a,i,I)))),(((LifeSpan (t +* (Initialized (stop I)))) + 1) + 1)) . x >= c + ((Computation (t +* (Initialized (stop (while>0 a,i,I)))),(((LifeSpan (t +* (Initialized (stop I)))) + 1) + 1)) . (DataLoc (s . a),i)) by A4, A8, A9, A10, A11, A45, A47; :: thesis: verum
end;
A48: (Computation (Computation (t +* (Initialized (stop (while>0 a,i,I)))),1),(LifeSpan (t +* (Initialized (stop I))))) . a = (Computation (t +* (Initialized (stop I))),(LifeSpan (t +* (Initialized (stop I))))) . a by A38, SCMPDS_4:23
.= (Result (t +* (Initialized (stop I)))) . a by A30, AMI_1:122
.= s . a by A10, A14, A25, A13, FUNCT_4:12 ;
A49: (Computation (t +* (Initialized (stop (while>0 a,i,I)))),(((LifeSpan (t +* (Initialized (stop I)))) + 1) + 1)) . a = (Computation (t +* (Initialized (stop (while>0 a,i,I)))),((LifeSpan (t +* (Initialized (stop I)))) + 1)) . a by A36, SCMPDS_2:66
.= s . a by A48, AMI_1:51 ;
then A50: while>0 a,i,I is_closed_on Computation (t +* (Initialized (stop (while>0 a,i,I)))),(((LifeSpan (t +* (Initialized (stop I)))) + 1) + 1) by A6, A46, A40, A43;
now
let k be Element of NAT ; :: thesis: IC (Computation (t +* (Initialized (stop (while>0 a,i,I)))),b1) in dom (stop (while>0 a,i,I))
per cases ( k < ((LifeSpan (t +* (Initialized (stop I)))) + 1) + 1 or k >= ((LifeSpan (t +* (Initialized (stop I)))) + 1) + 1 ) ;
suppose k < ((LifeSpan (t +* (Initialized (stop I)))) + 1) + 1 ; :: thesis: IC (Computation (t +* (Initialized (stop (while>0 a,i,I)))),b1) in dom (stop (while>0 a,i,I))
then A51: k <= (LifeSpan (t +* (Initialized (stop I)))) + 1 by INT_1:20;
hereby :: thesis: verum
per cases ( k <= LifeSpan (t +* (Initialized (stop I))) or k = (LifeSpan (t +* (Initialized (stop I)))) + 1 ) by A51, NAT_1:8;
suppose A52: k <= LifeSpan (t +* (Initialized (stop I))) ; :: thesis: IC (Computation (t +* (Initialized (stop (while>0 a,i,I)))),k) in dom (stop (while>0 a,i,I))
hereby :: thesis: verum
per cases ( k = 0 or k <> 0 ) ;
suppose k = 0 ; :: thesis: IC (Computation (t +* (Initialized (stop (while>0 a,i,I)))),k) in dom (stop (while>0 a,i,I))
hence IC (Computation (t +* (Initialized (stop (while>0 a,i,I)))),k) in dom (stop (while>0 a,i,I)) by A15, A26, AMI_1:13; :: thesis: verum
end;
suppose k <> 0 ; :: thesis: IC (Computation (t +* (Initialized (stop (while>0 a,i,I)))),k) in dom (stop (while>0 a,i,I))
then consider kn being Nat such that
A53: k = kn + 1 by NAT_1:6;
reconsider kn = kn as Element of NAT by ORDINAL1:def 13;
reconsider lm = IC (Computation (t +* (Initialized (stop I))),kn) as Element of NAT by ORDINAL1:def 13;
kn < k by A53, XREAL_1:31;
then kn < LifeSpan (t +* (Initialized (stop I))) by A52, XXREAL_0:2;
then (IC (Computation (t +* (Initialized (stop I))),kn)) + 1 = IC (Computation (Computation (t +* (Initialized (stop (while>0 a,i,I)))),1),kn) by A1, A19, A31, A29, A32, A22, A24, SCMPDS_7:34;
then A54: IC (Computation (t +* (Initialized (stop (while>0 a,i,I)))),k) = inspos (lm + 1) by A53, AMI_1:51;
IC (Computation (t +* (Initialized (stop I))),kn) in dom (stop I) by A28, SCMPDS_6:def 2;
then lm < card (stop I) by SCMPDS_4:1;
then lm < (card I) + 1 by SCMPDS_5:7;
then A55: lm + 1 <= (card I) + 1 by INT_1:20;
(card I) + 1 < (card I) + 3 by XREAL_1:8;
then lm + 1 < (card I) + 3 by A55, XXREAL_0:2;
then lm + 1 < card (stop (while>0 a,i,I)) by Lm3;
hence IC (Computation (t +* (Initialized (stop (while>0 a,i,I)))),k) in dom (stop (while>0 a,i,I)) by A54, SCMPDS_4:1; :: thesis: verum
end;
end;
end;
end;
suppose A56: k = (LifeSpan (t +* (Initialized (stop I)))) + 1 ; :: thesis: IC (Computation (t +* (Initialized (stop (while>0 a,i,I)))),k) in dom (stop (while>0 a,i,I))
inspos ((card I) + 1) in dom (stop (while>0 a,i,I)) by A27, SCMPDS_6:18;
hence IC (Computation (t +* (Initialized (stop (while>0 a,i,I)))),k) in dom (stop (while>0 a,i,I)) by A1, A19, A31, A29, A32, A22, A24, A34, A56, SCMPDS_7:36; :: thesis: verum
end;
end;
end;
end;
suppose k >= ((LifeSpan (t +* (Initialized (stop I)))) + 1) + 1 ; :: thesis: IC (Computation (t +* (Initialized (stop (while>0 a,i,I)))),b1) in dom (stop (while>0 a,i,I))
then consider nn being Nat such that
A57: k = (((LifeSpan (t +* (Initialized (stop I)))) + 1) + 1) + nn by NAT_1:10;
A58: nn in NAT by ORDINAL1:def 13;
then Computation (t +* (Initialized (stop (while>0 a,i,I)))),k = Computation ((Computation (t +* (Initialized (stop (while>0 a,i,I)))),(((LifeSpan (t +* (Initialized (stop I)))) + 1) + 1)) +* (Initialized (stop (while>0 a,i,I)))),nn by A37, A57, AMI_1:51;
hence IC (Computation (t +* (Initialized (stop (while>0 a,i,I)))),k) in dom (stop (while>0 a,i,I)) by A50, A58, SCMPDS_6:def 2; :: thesis: verum
end;
end;
end;
hence while>0 a,i,I is_closed_on t by SCMPDS_6:def 2; :: thesis: while>0 a,i,I is_halting_on t
while>0 a,i,I is_halting_on Computation (t +* (Initialized (stop (while>0 a,i,I)))),(((LifeSpan (t +* (Initialized (stop I)))) + 1) + 1) by A6, A49, A46, A40, A43;
then ProgramPart (Computation (t +* (Initialized (stop (while>0 a,i,I)))),(((LifeSpan (t +* (Initialized (stop I)))) + 1) + 1)) halts_on Computation (t +* (Initialized (stop (while>0 a,i,I)))),(((LifeSpan (t +* (Initialized (stop I)))) + 1) + 1) by A37, SCMPDS_6:def 3;
then ProgramPart (t +* (Initialized (stop (while>0 a,i,I)))) halts_on Computation (t +* (Initialized (stop (while>0 a,i,I)))),(((LifeSpan (t +* (Initialized (stop I)))) + 1) + 1) by AMI_1:93, AMI_1:144;
then ProgramPart (t +* (Initialized (stop (while>0 a,i,I)))) halts_on t +* (Initialized (stop (while>0 a,i,I))) by AMI_1:93;
hence while>0 a,i,I is_halting_on t by SCMPDS_6:def 3; :: thesis: verum
end;
end;
end;
hence S1[k + 1] ; :: thesis: verum
end;
set n = f . (Dstate s);
A59: for x being Int_position st x in Y holds
s . x = s . x ;
A60: S1[ 0 ]
proof
let t be State of ; :: thesis: ( f . (Dstate t) <= 0 & ( for x being Int_position st x in X holds
t . x >= c + (t . (DataLoc (s . a),i)) ) & ( for x being Int_position st x in Y holds
t . x = s . x ) & t . a = s . a implies ( while>0 a,i,I is_closed_on t & while>0 a,i,I is_halting_on t ) )

assume f . (Dstate t) <= 0 ; :: thesis: ( ex x being Int_position st
( x in X & not t . x >= c + (t . (DataLoc (s . a),i)) ) or ex x being Int_position st
( x in Y & not t . x = s . x ) or not t . a = s . a or ( while>0 a,i,I is_closed_on t & while>0 a,i,I is_halting_on t ) )

then f . (Dstate t) = 0 ;
then A61: t . (DataLoc (s . a),i) <= 0 by A2;
assume for x being Int_position st x in X holds
t . x >= c + (t . (DataLoc (s . a),i)) ; :: thesis: ( ex x being Int_position st
( x in Y & not t . x = s . x ) or not t . a = s . a or ( while>0 a,i,I is_closed_on t & while>0 a,i,I is_halting_on t ) )

assume for x being Int_position st x in Y holds
t . x = s . x ; :: thesis: ( not t . a = s . a or ( while>0 a,i,I is_closed_on t & while>0 a,i,I is_halting_on t ) )
assume t . a = s . a ; :: thesis: ( while>0 a,i,I is_closed_on t & while>0 a,i,I is_halting_on t )
hence ( while>0 a,i,I is_closed_on t & while>0 a,i,I is_halting_on t ) by A61, Th20; :: thesis: verum
end;
for k being Element of NAT holds S1[k] from NAT_1:sch 1(A60, A5);
then S1[f . (Dstate s)] ;
hence ( while>0 a,i,I is_closed_on s & while>0 a,i,I is_halting_on s ) by A3, A59; :: thesis: verum