let s be State of SCM+FSA; :: thesis: for I, J being Program of SCM+FSA
for a being read-write Int-Location st s . a = 0 & J is_closed_on Initialized s & J is_halting_on Initialized s holds
IExec ((if<0 (a,I,J)),s) = (IExec (J,s)) +* (Start-At (((((card I) + (card J)) + (card J)) + 7),SCM+FSA))
let I, J be Program of SCM+FSA; :: thesis: for a being read-write Int-Location st s . a = 0 & J is_closed_on Initialized s & J is_halting_on Initialized s holds
IExec ((if<0 (a,I,J)),s) = (IExec (J,s)) +* (Start-At (((((card I) + (card J)) + (card J)) + 7),SCM+FSA))
let a be read-write Int-Location ; :: thesis: ( s . a = 0 & J is_closed_on Initialized s & J is_halting_on Initialized s implies IExec ((if<0 (a,I,J)),s) = (IExec (J,s)) +* (Start-At (((((card I) + (card J)) + (card J)) + 7),SCM+FSA)) )
assume A1: s . a = 0 ; :: thesis: ( not J is_closed_on Initialized s or not J is_halting_on Initialized s or IExec ((if<0 (a,I,J)),s) = (IExec (J,s)) +* (Start-At (((((card I) + (card J)) + (card J)) + 7),SCM+FSA)) )
assume that
A2: J is_closed_on Initialized s and
A3: J is_halting_on Initialized s ; :: thesis: IExec ((if<0 (a,I,J)),s) = (IExec (J,s)) +* (Start-At (((((card I) + (card J)) + (card J)) + 7),SCM+FSA))
thus IExec ((if<0 (a,I,J)),s) = (IExec (J,s)) +* (Start-At ((((card (if>0 (a,J,I))) + (card J)) + 3),SCM+FSA)) by A1, A2, A3, Th17
.= (IExec (J,s)) +* (Start-At ((((((card I) + (card J)) + 4) + (card J)) + 3),SCM+FSA)) by Th15
.= (IExec (J,s)) +* (Start-At (((((card I) + (card J)) + (card J)) + 7),SCM+FSA)) ; :: thesis: verum