let s be State of SCMPDS ; :: thesis: for I being Program of SCMPDS st Initialized I c= s holds
IC s = 0

let I be Program of SCMPDS ; :: thesis: ( Initialized I c= s implies IC s = 0 )
A1: IC (Initialized I) = 0 by SCMPDS_4:8;
A2: IC SCMPDS in dom (Initialized I) by SCMPDS_4:7;
assume Initialized I c= s ; :: thesis: IC s = 0
hence IC s = 0 by A1, A2, GRFUNC_1:8; :: thesis: verum