let am, bp, cm, dp be non pair set ; :: thesis: for cin being set
for s being State of (BitFTA2Circ am,bp,cm,dp,cin)
for a123, a4, a5 being Element of BOOLEAN st a123 = s . (GFA2AdderOutput am,bp,cm) & a4 = s . dp & a5 = s . cin holds
( (Following s) . [<*(GFA2AdderOutput am,bp,cm),cin*>,and2c ] = a123 '&' ('not' a5) & (Following s) . [<*cin,dp*>,and2a ] = ('not' a5) '&' a4 & (Following s) . [<*dp,(GFA2AdderOutput am,bp,cm)*>,and2 ] = a4 '&' a123 )
let cin be set ; :: thesis: for s being State of (BitFTA2Circ am,bp,cm,dp,cin)
for a123, a4, a5 being Element of BOOLEAN st a123 = s . (GFA2AdderOutput am,bp,cm) & a4 = s . dp & a5 = s . cin holds
( (Following s) . [<*(GFA2AdderOutput am,bp,cm),cin*>,and2c ] = a123 '&' ('not' a5) & (Following s) . [<*cin,dp*>,and2a ] = ('not' a5) '&' a4 & (Following s) . [<*dp,(GFA2AdderOutput am,bp,cm)*>,and2 ] = a4 '&' a123 )
set S = BitFTA2Str am,bp,cm,dp,cin;
set C = BitFTA2Circ am,bp,cm,dp,cin;
set A1 = GFA2AdderOutput am,bp,cm;
set S2 = BitGFA1Str (GFA2AdderOutput am,bp,cm),cin,dp;
set C2 = BitGFA1Circ (GFA2AdderOutput am,bp,cm),cin,dp;
set A1cin = [<*(GFA2AdderOutput am,bp,cm),cin*>,and2c ];
set cindp = [<*cin,dp*>,and2a ];
set dpA1 = [<*dp,(GFA2AdderOutput am,bp,cm)*>,and2 ];
let s be State of (BitFTA2Circ am,bp,cm,dp,cin); :: thesis: for a123, a4, a5 being Element of BOOLEAN st a123 = s . (GFA2AdderOutput am,bp,cm) & a4 = s . dp & a5 = s . cin holds
( (Following s) . [<*(GFA2AdderOutput am,bp,cm),cin*>,and2c ] = a123 '&' ('not' a5) & (Following s) . [<*cin,dp*>,and2a ] = ('not' a5) '&' a4 & (Following s) . [<*dp,(GFA2AdderOutput am,bp,cm)*>,and2 ] = a4 '&' a123 )
let a123, a4, a5 be Element of BOOLEAN ; :: thesis: ( a123 = s . (GFA2AdderOutput am,bp,cm) & a4 = s . dp & a5 = s . cin implies ( (Following s) . [<*(GFA2AdderOutput am,bp,cm),cin*>,and2c ] = a123 '&' ('not' a5) & (Following s) . [<*cin,dp*>,and2a ] = ('not' a5) '&' a4 & (Following s) . [<*dp,(GFA2AdderOutput am,bp,cm)*>,and2 ] = a4 '&' a123 ) )
assume that
A1: a123 = s . (GFA2AdderOutput am,bp,cm) and
A2: a4 = s . dp and
A3: a5 = s . cin ; :: thesis: ( (Following s) . [<*(GFA2AdderOutput am,bp,cm),cin*>,and2c ] = a123 '&' ('not' a5) & (Following s) . [<*cin,dp*>,and2a ] = ('not' a5) '&' a4 & (Following s) . [<*dp,(GFA2AdderOutput am,bp,cm)*>,and2 ] = a4 '&' a123 )
A4: dom s = the carrier of (BitFTA2Str am,bp,cm,dp,cin) by CIRCUIT1:4;
A5: cin in the carrier of (BitFTA2Str am,bp,cm,dp,cin) by Th24;
A6: GFA2AdderOutput am,bp,cm in the carrier of (BitFTA2Str am,bp,cm,dp,cin) by Th24;
A7: InnerVertices (BitFTA2Str am,bp,cm,dp,cin) = the carrier' of (BitFTA2Str am,bp,cm,dp,cin) by FACIRC_1:37;
then [<*(GFA2AdderOutput am,bp,cm),cin*>,and2c ] in the carrier' of (BitFTA2Str am,bp,cm,dp,cin) by Th25;
hence (Following s) . [<*(GFA2AdderOutput am,bp,cm),cin*>,and2c ] = and2c . (s * <*(GFA2AdderOutput am,bp,cm),cin*>) by FACIRC_1:35
.= and2c . <*a123,a5*> by A1, A3, A6, A5, A4, FINSEQ_2:145
.= a123 '&' ('not' a5) by GFACIRC1:def 3 ;
:: thesis: ( (Following s) . [<*cin,dp*>,and2a ] = ('not' a5) '&' a4 & (Following s) . [<*dp,(GFA2AdderOutput am,bp,cm)*>,and2 ] = a4 '&' a123 )
A8: dp in the carrier of (BitFTA2Str am,bp,cm,dp,cin) by Th24;
[<*cin,dp*>,and2a ] in the carrier' of (BitFTA2Str am,bp,cm,dp,cin) by A7, Th25;
hence (Following s) . [<*cin,dp*>,and2a ] = and2a . (s * <*cin,dp*>) by FACIRC_1:35
.= and2a . <*a5,a4*> by A2, A3, A8, A5, A4, FINSEQ_2:145
.= ('not' a5) '&' a4 by TWOSCOMP:def 2 ;
:: thesis: (Following s) . [<*dp,(GFA2AdderOutput am,bp,cm)*>,and2 ] = a4 '&' a123
[<*dp,(GFA2AdderOutput am,bp,cm)*>,and2 ] in the carrier' of (BitFTA2Str am,bp,cm,dp,cin) by A7, Th25;
hence (Following s) . [<*dp,(GFA2AdderOutput am,bp,cm)*>,and2 ] = and2 . (s * <*dp,(GFA2AdderOutput am,bp,cm)*>) by FACIRC_1:35
.= and2 . <*a4,a123*> by A1, A2, A6, A8, A4, FINSEQ_2:145
.= a4 '&' a123 by TWOSCOMP:def 1 ;
:: thesis: verum