let s1, s2 be State of SCMPDS ; :: thesis: ( s1,s2 equal_outside NAT iff s1 | (SCM-Data-Loc \/ {(IC SCMPDS )}) = s2 | (SCM-Data-Loc \/ {(IC SCMPDS )}) )
set Y = NAT ;
set X = SCM-Data-Loc \/ {(IC SCMPDS )};
A1: (((SCM-Data-Loc \/ {(IC SCMPDS )}) \/ NAT ) \ NAT ) \/ NAT = ((SCM-Data-Loc \/ {(IC SCMPDS )}) \/ NAT ) \/ NAT by XBOOLE_1:39
.= (SCM-Data-Loc \/ {(IC SCMPDS )}) \/ (NAT \/ NAT ) by XBOOLE_1:4
.= NAT \/ (SCM-Data-Loc \/ {(IC SCMPDS )}) ;
A2: NAT misses ((SCM-Data-Loc \/ {(IC SCMPDS )}) \/ NAT ) \ NAT by XBOOLE_1:79;
A3: SCM-Data-Loc \/ {(IC SCMPDS )} misses NAT
proof end;
dom s2 = the carrier of SCMPDS by PARTFUN1:def 4;
then A7: (dom s2) \ NAT = SCM-Data-Loc \/ {(IC SCMPDS )} by A1, A2, A3, SCMPDS_3:5, XBOOLE_1:72;
dom s1 = the carrier of SCMPDS by PARTFUN1:def 4;
then (dom s1) \ NAT = SCM-Data-Loc \/ {(IC SCMPDS )} by A1, A2, A3, SCMPDS_3:5, XBOOLE_1:72;
hence ( s1,s2 equal_outside NAT iff s1 | (SCM-Data-Loc \/ {(IC SCMPDS )}) = s2 | (SCM-Data-Loc \/ {(IC SCMPDS )}) ) by A7, FUNCT_7:def 2; :: thesis: verum