let s1, s2 be State of SCMPDS; ( s1,s2 equal_outside NAT iff s1 | (SCM-Data-Loc \/ {(IC SCMPDS)}) = s2 | (SCM-Data-Loc \/ {(IC SCMPDS)}) )
set Y = NAT ;
set X = SCM-Data-Loc \/ {(IC SCMPDS)};
A1: (((SCM-Data-Loc \/ {(IC SCMPDS)}) \/ NAT) \ NAT) \/ NAT =
((SCM-Data-Loc \/ {(IC SCMPDS)}) \/ NAT) \/ NAT
by XBOOLE_1:39
.=
(SCM-Data-Loc \/ {(IC SCMPDS)}) \/ (NAT \/ NAT)
by XBOOLE_1:4
.=
NAT \/ (SCM-Data-Loc \/ {(IC SCMPDS)})
;
A2:
NAT misses ((SCM-Data-Loc \/ {(IC SCMPDS)}) \/ NAT) \ NAT
by XBOOLE_1:79;
A3:
SCM-Data-Loc \/ {(IC SCMPDS)} misses NAT
dom s2 = the carrier of SCMPDS
by PARTFUN1:def 4;
then A7:
(dom s2) \ NAT = SCM-Data-Loc \/ {(IC SCMPDS)}
by A1, A2, A3, SCMPDS_3:5, XBOOLE_1:72;
dom s1 = the carrier of SCMPDS
by PARTFUN1:def 4;
then
(dom s1) \ NAT = SCM-Data-Loc \/ {(IC SCMPDS)}
by A1, A2, A3, SCMPDS_3:5, XBOOLE_1:72;
hence
( s1,s2 equal_outside NAT iff s1 | (SCM-Data-Loc \/ {(IC SCMPDS)}) = s2 | (SCM-Data-Loc \/ {(IC SCMPDS)}) )
by A7, FUNCT_7:def 2; verum