let s be State of SCM+FSA ; :: thesis: for I, J being Program of SCM+FSA
for a being read-write Int-Location st s . a < 0 & I is_closed_on Initialize s & I is_halting_on Initialize s holds
IExec (if<0 a,I,J),s = (IExec I,s) +* (Start-At ((((card I) + (card J)) + (card J)) + 7),SCM+FSA )
let I, J be Program of SCM+FSA ; :: thesis: for a being read-write Int-Location st s . a < 0 & I is_closed_on Initialize s & I is_halting_on Initialize s holds
IExec (if<0 a,I,J),s = (IExec I,s) +* (Start-At ((((card I) + (card J)) + (card J)) + 7),SCM+FSA )
let a be read-write Int-Location ; :: thesis: ( s . a < 0 & I is_closed_on Initialize s & I is_halting_on Initialize s implies IExec (if<0 a,I,J),s = (IExec I,s) +* (Start-At ((((card I) + (card J)) + (card J)) + 7),SCM+FSA ) )
assume A1: s . a < 0 ; :: thesis: ( not I is_closed_on Initialize s or not I is_halting_on Initialize s or IExec (if<0 a,I,J),s = (IExec I,s) +* (Start-At ((((card I) + (card J)) + (card J)) + 7),SCM+FSA ) )
assume that
A2: I is_closed_on Initialize s and
A3: I is_halting_on Initialize s ; :: thesis: IExec (if<0 a,I,J),s = (IExec I,s) +* (Start-At ((((card I) + (card J)) + (card J)) + 7),SCM+FSA )
A4: (Initialize s) . a <= 0 by A1, SCMFSA6C:3;
then A5: if>0 a,J,I is_halting_on Initialize s by A2, A3, Th24;
if>0 a,J,I is_closed_on Initialize s by A2, A3, A4, Th24;
hence IExec (if<0 a,I,J),s = (IExec (if>0 a,J,I),s) +* (Start-At (((card (if>0 a,J,I)) + (card J)) + 3),SCM+FSA ) by A1, A5, Th19
.= (IExec (if>0 a,J,I),s) +* (Start-At (((((card I) + (card J)) + 4) + (card J)) + 3),SCM+FSA ) by Th15
.= ((IExec I,s) +* (Start-At (((card I) + (card J)) + 3),SCM+FSA )) +* (Start-At (((((card I) + (card J)) + 4) + (card J)) + 3),SCM+FSA ) by A1, A2, A3, Th25
.= (IExec I,s) +* (Start-At ((((card I) + (card J)) + (card J)) + 7),SCM+FSA ) by AMI_1:141 ;
:: thesis: verum