let s1, s2 be State of SCMPDS; :: thesis: ( s1,s2 equal_outside NAT iff s1 | (SCM-Data-Loc \/ {(IC SCMPDS)}) = s2 | (SCM-Data-Loc \/ {(IC SCMPDS)}) )
set Y = NAT ;
set X = SCM-Data-Loc \/ {(IC SCMPDS)};
A1: (((SCM-Data-Loc \/ {(IC SCMPDS)}) \/ NAT) \ NAT) \/ NAT = ((SCM-Data-Loc \/ {(IC SCMPDS)}) \/ NAT) \/ NAT by XBOOLE_1:39
.= (SCM-Data-Loc \/ {(IC SCMPDS)}) \/ (NAT \/ NAT) by XBOOLE_1:4
.= NAT \/ (SCM-Data-Loc \/ {(IC SCMPDS)}) ;
A2: NAT misses ((SCM-Data-Loc \/ {(IC SCMPDS)}) \/ NAT) \ NAT by XBOOLE_1:79;
A3: SCM-Data-Loc \/ {(IC SCMPDS)} misses NAT
proof end;
dom s2 = the carrier of SCMPDS by PARTFUN1:def 4;
then A7: (dom s2) \ NAT = SCM-Data-Loc \/ {(IC SCMPDS)} by A1, A2, A3, SCMPDS_3:5, XBOOLE_1:72;
dom s1 = the carrier of SCMPDS by PARTFUN1:def 4;
then (dom s1) \ NAT = SCM-Data-Loc \/ {(IC SCMPDS)} by A1, A2, A3, SCMPDS_3:5, XBOOLE_1:72;
hence ( s1,s2 equal_outside NAT iff s1 | (SCM-Data-Loc \/ {(IC SCMPDS)}) = s2 | (SCM-Data-Loc \/ {(IC SCMPDS)}) ) by A7, FUNCT_7:def 2; :: thesis: verum