let s be State of SCM+FSA; :: thesis: for aa being Int-Location
for I being Program of {INT,(INT *)} st I is_closed_on Initialized s & I is_halting_on Initialized s & not I destroys aa holds
(IExec (I,s)) . aa = (Initialized s) . aa
let aa be Int-Location ; :: thesis: for I being Program of {INT,(INT *)} st I is_closed_on Initialized s & I is_halting_on Initialized s & not I destroys aa holds
(IExec (I,s)) . aa = (Initialized s) . aa
let I be Program of {INT,(INT *)}; :: thesis: ( I is_closed_on Initialized s & I is_halting_on Initialized s & not I destroys aa implies (IExec (I,s)) . aa = (Initialized s) . aa )
set a = aa;
A1: DataPart (Initialized s) = DataPart ((Initialized s) +* (I +* (Start-At (0,SCM+FSA)))) by SCMFSA8A:11;
assume ( I is_closed_on Initialized s & I is_halting_on Initialized s & not I destroys aa ) ; :: thesis: (IExec (I,s)) . aa = (Initialized s) . aa
hence (IExec (I,s)) . aa = (Comput ((ProgramPart ((Initialized s) +* (I +* (Start-At (0,SCM+FSA))))),((Initialized s) +* (I +* (Start-At (0,SCM+FSA)))),0)) . aa by SCMFSA8C:89
.= ((Initialized s) +* (I +* (Start-At (0,SCM+FSA)))) . aa by EXTPRO_1:3
.= (Initialized s) . aa by A1, SCMFSA6A:38 ;
:: thesis: verum