let s be State of SCMPDS ; :: thesis: for I being parahalting Program of SCMPDS
for J being Program of SCMPDS
for k being Element of NAT st k <= LifeSpan (s +* (Initialized (stop I))) holds
Comput (ProgramPart (s +* (Initialized (stop I)))),(s +* (Initialized (stop I))),k, Comput (ProgramPart (s +* ((I ';' J) +* (Start-At 0 ,SCMPDS )))),(s +* ((I ';' J) +* (Start-At 0 ,SCMPDS ))),k equal_outside NAT

let I be parahalting Program of SCMPDS ; :: thesis: for J being Program of SCMPDS
for k being Element of NAT st k <= LifeSpan (s +* (Initialized (stop I))) holds
Comput (ProgramPart (s +* (Initialized (stop I)))),(s +* (Initialized (stop I))),k, Comput (ProgramPart (s +* ((I ';' J) +* (Start-At 0 ,SCMPDS )))),(s +* ((I ';' J) +* (Start-At 0 ,SCMPDS ))),k equal_outside NAT

let J be Program of SCMPDS ; :: thesis: for k being Element of NAT st k <= LifeSpan (s +* (Initialized (stop I))) holds
Comput (ProgramPart (s +* (Initialized (stop I)))),(s +* (Initialized (stop I))),k, Comput (ProgramPart (s +* ((I ';' J) +* (Start-At 0 ,SCMPDS )))),(s +* ((I ';' J) +* (Start-At 0 ,SCMPDS ))),k equal_outside NAT

let k be Element of NAT ; :: thesis: ( k <= LifeSpan (s +* (Initialized (stop I))) implies Comput (ProgramPart (s +* (Initialized (stop I)))),(s +* (Initialized (stop I))),k, Comput (ProgramPart (s +* ((I ';' J) +* (Start-At 0 ,SCMPDS )))),(s +* ((I ';' J) +* (Start-At 0 ,SCMPDS ))),k equal_outside NAT )
set SA0 = Start-At 0 ,SCMPDS ;
set spI = stop I;
set IsI = Initialized (stop I);
set s1 = s +* (Initialized (stop I));
set s2 = s +* ((I ';' J) +* (Start-At 0 ,SCMPDS ));
set n = LifeSpan (s +* (Initialized (stop I)));
A1: s +* (Initialized (stop I)) = (s +* (stop I)) +* (Start-At 0 ,SCMPDS ) by FUNCT_4:15
.= (s +* (Start-At 0 ,SCMPDS )) +* (stop I) by SCMPDS_4:62 ;
defpred S1[ Element of NAT ] means ( $1 <= LifeSpan (s +* (Initialized (stop I))) implies Comput (ProgramPart (s +* (Initialized (stop I)))),(s +* (Initialized (stop I))),$1, Comput (ProgramPart (s +* ((I ';' J) +* (Start-At 0 ,SCMPDS )))),(s +* ((I ';' J) +* (Start-At 0 ,SCMPDS ))),$1 equal_outside NAT );
A2: s +* ((I ';' J) +* (Start-At 0 ,SCMPDS )) = (s +* (I ';' J)) +* (Start-At 0 ,SCMPDS ) by FUNCT_4:15
.= (s +* (Start-At 0 ,SCMPDS )) +* (I ';' J) by SCMPDS_4:62 ;
A3: Initialized (stop I) c= s +* (Initialized (stop I)) by FUNCT_4:26;
A4: for n being Element of NAT st S1[n] holds
S1[n + 1]
proof
let m be Element of NAT ; :: thesis: ( S1[m] implies S1[m + 1] )
assume A5: ( m <= LifeSpan (s +* (Initialized (stop I))) implies Comput (ProgramPart (s +* (Initialized (stop I)))),(s +* (Initialized (stop I))),m, Comput (ProgramPart (s +* ((I ';' J) +* (Start-At 0 ,SCMPDS )))),(s +* ((I ';' J) +* (Start-At 0 ,SCMPDS ))),m equal_outside NAT ) ; :: thesis: S1[m + 1]
T: ProgramPart (s +* ((I ';' J) +* (Start-At 0 ,SCMPDS ))) = ProgramPart (Comput (ProgramPart (s +* ((I ';' J) +* (Start-At 0 ,SCMPDS )))),(s +* ((I ';' J) +* (Start-At 0 ,SCMPDS ))),m) by AMI_1:144;
A6: Comput (ProgramPart (s +* ((I ';' J) +* (Start-At 0 ,SCMPDS )))),(s +* ((I ';' J) +* (Start-At 0 ,SCMPDS ))),(m + 1) = Following (ProgramPart (s +* ((I ';' J) +* (Start-At 0 ,SCMPDS )))),(Comput (ProgramPart (s +* ((I ';' J) +* (Start-At 0 ,SCMPDS )))),(s +* ((I ';' J) +* (Start-At 0 ,SCMPDS ))),m) by AMI_1:14
.= Exec (CurInstr (ProgramPart (Comput (ProgramPart (s +* ((I ';' J) +* (Start-At 0 ,SCMPDS )))),(s +* ((I ';' J) +* (Start-At 0 ,SCMPDS ))),m)),(Comput (ProgramPart (s +* ((I ';' J) +* (Start-At 0 ,SCMPDS )))),(s +* ((I ';' J) +* (Start-At 0 ,SCMPDS ))),m)),(Comput (ProgramPart (s +* ((I ';' J) +* (Start-At 0 ,SCMPDS )))),(s +* ((I ';' J) +* (Start-At 0 ,SCMPDS ))),m) by T ;
A7: IC (Comput (ProgramPart (s +* (Initialized (stop I)))),(s +* (Initialized (stop I))),m) in dom (stop I) by A3, SCMPDS_4:def 9;
T: ProgramPart (s +* (Initialized (stop I))) = ProgramPart (Comput (ProgramPart (s +* (Initialized (stop I)))),(s +* (Initialized (stop I))),m) by AMI_1:144;
A8: Comput (ProgramPart (s +* (Initialized (stop I)))),(s +* (Initialized (stop I))),(m + 1) = Following (ProgramPart (s +* (Initialized (stop I)))),(Comput (ProgramPart (s +* (Initialized (stop I)))),(s +* (Initialized (stop I))),m) by AMI_1:14
.= Exec (CurInstr (ProgramPart (Comput (ProgramPart (s +* (Initialized (stop I)))),(s +* (Initialized (stop I))),m)),(Comput (ProgramPart (s +* (Initialized (stop I)))),(s +* (Initialized (stop I))),m)),(Comput (ProgramPart (s +* (Initialized (stop I)))),(s +* (Initialized (stop I))),m) by T ;
assume A9: m + 1 <= LifeSpan (s +* (Initialized (stop I))) ; :: thesis: Comput (ProgramPart (s +* (Initialized (stop I)))),(s +* (Initialized (stop I))),(m + 1), Comput (ProgramPart (s +* ((I ';' J) +* (Start-At 0 ,SCMPDS )))),(s +* ((I ';' J) +* (Start-At 0 ,SCMPDS ))),(m + 1) equal_outside NAT
then A10: IC (Comput (ProgramPart (s +* (Initialized (stop I)))),(s +* (Initialized (stop I))),m) = IC (Comput (ProgramPart (s +* ((I ';' J) +* (Start-At 0 ,SCMPDS )))),(s +* ((I ';' J) +* (Start-At 0 ,SCMPDS ))),m) by A5, AMI_1:121, NAT_1:13;
m < LifeSpan (s +* (Initialized (stop I))) by A9, NAT_1:13;
then A11: IC (Comput (ProgramPart (s +* (Initialized (stop I)))),(s +* (Initialized (stop I))),m) in dom I by Th28;
then A12: IC (Comput (ProgramPart (s +* (Initialized (stop I)))),(s +* (Initialized (stop I))),m) in dom (I ';' J) by FUNCT_4:13;
Y: (ProgramPart (Comput (ProgramPart (s +* (Initialized (stop I)))),(s +* (Initialized (stop I))),m)) /. (IC (Comput (ProgramPart (s +* (Initialized (stop I)))),(s +* (Initialized (stop I))),m)) = (Comput (ProgramPart (s +* (Initialized (stop I)))),(s +* (Initialized (stop I))),m) . (IC (Comput (ProgramPart (s +* (Initialized (stop I)))),(s +* (Initialized (stop I))),m)) by AMI_1:150;
Z: (ProgramPart (Comput (ProgramPart (s +* ((I ';' J) +* (Start-At 0 ,SCMPDS )))),(s +* ((I ';' J) +* (Start-At 0 ,SCMPDS ))),m)) /. (IC (Comput (ProgramPart (s +* ((I ';' J) +* (Start-At 0 ,SCMPDS )))),(s +* ((I ';' J) +* (Start-At 0 ,SCMPDS ))),m)) = (Comput (ProgramPart (s +* ((I ';' J) +* (Start-At 0 ,SCMPDS )))),(s +* ((I ';' J) +* (Start-At 0 ,SCMPDS ))),m) . (IC (Comput (ProgramPart (s +* ((I ';' J) +* (Start-At 0 ,SCMPDS )))),(s +* ((I ';' J) +* (Start-At 0 ,SCMPDS ))),m)) by AMI_1:150;
CurInstr (ProgramPart (Comput (ProgramPart (s +* (Initialized (stop I)))),(s +* (Initialized (stop I))),m)),(Comput (ProgramPart (s +* (Initialized (stop I)))),(s +* (Initialized (stop I))),m) = (s +* (Initialized (stop I))) . (IC (Comput (ProgramPart (s +* (Initialized (stop I)))),(s +* (Initialized (stop I))),m)) by AMI_1:54, Y
.= (stop I) . (IC (Comput (ProgramPart (s +* (Initialized (stop I)))),(s +* (Initialized (stop I))),m)) by A1, A7, FUNCT_4:14
.= I . (IC (Comput (ProgramPart (s +* (Initialized (stop I)))),(s +* (Initialized (stop I))),m)) by A11, SCMPDS_4:37
.= (I ';' J) . (IC (Comput (ProgramPart (s +* (Initialized (stop I)))),(s +* (Initialized (stop I))),m)) by A11, SCMPDS_4:37
.= (s +* ((I ';' J) +* (Start-At 0 ,SCMPDS ))) . (IC (Comput (ProgramPart (s +* (Initialized (stop I)))),(s +* (Initialized (stop I))),m)) by A2, A12, FUNCT_4:14
.= CurInstr (ProgramPart (Comput (ProgramPart (s +* ((I ';' J) +* (Start-At 0 ,SCMPDS )))),(s +* ((I ';' J) +* (Start-At 0 ,SCMPDS ))),m)),(Comput (ProgramPart (s +* ((I ';' J) +* (Start-At 0 ,SCMPDS )))),(s +* ((I ';' J) +* (Start-At 0 ,SCMPDS ))),m) by A10, AMI_1:54, Z ;
hence Comput (ProgramPart (s +* (Initialized (stop I)))),(s +* (Initialized (stop I))),(m + 1), Comput (ProgramPart (s +* ((I ';' J) +* (Start-At 0 ,SCMPDS )))),(s +* ((I ';' J) +* (Start-At 0 ,SCMPDS ))),(m + 1) equal_outside NAT by A5, A9, A8, A6, NAT_1:13, SCMPDS_4:15; :: thesis: verum
end;
A13: Comput (ProgramPart (s +* ((I ';' J) +* (Start-At 0 ,SCMPDS )))),(s +* ((I ';' J) +* (Start-At 0 ,SCMPDS ))),0 = s +* ((I ';' J) +* (Start-At 0 ,SCMPDS )) by AMI_1:13;
A14: Comput (ProgramPart (s +* (Initialized (stop I)))),(s +* (Initialized (stop I))),0 = s +* (Initialized (stop I)) by AMI_1:13;
A15: s +* (Start-At 0 ,SCMPDS ),(s +* (Start-At 0 ,SCMPDS )) +* (I ';' J) equal_outside NAT by AMI_1:120;
(s +* (Start-At 0 ,SCMPDS )) +* (stop I),s +* (Start-At 0 ,SCMPDS ) equal_outside NAT by AMI_1:120, FUNCT_7:28;
then A16: S1[ 0 ] by A1, A2, A15, A14, A13, FUNCT_7:29;
A17: for k being Element of NAT holds S1[k] from NAT_1:sch 1(A16, A4);
assume k <= LifeSpan (s +* (Initialized (stop I))) ; :: thesis: Comput (ProgramPart (s +* (Initialized (stop I)))),(s +* (Initialized (stop I))),k, Comput (ProgramPart (s +* ((I ';' J) +* (Start-At 0 ,SCMPDS )))),(s +* ((I ';' J) +* (Start-At 0 ,SCMPDS ))),k equal_outside NAT
hence Comput (ProgramPart (s +* (Initialized (stop I)))),(s +* (Initialized (stop I))),k, Comput (ProgramPart (s +* ((I ';' J) +* (Start-At 0 ,SCMPDS )))),(s +* ((I ';' J) +* (Start-At 0 ,SCMPDS ))),k equal_outside NAT by A17; :: thesis: verum