let s1, s2 be State of SCMPDS; :: thesis: ( s1,s2 equal_outside NAT iff s1 | (SCM-Data-Loc \/ {(IC )}) = s2 | (SCM-Data-Loc \/ {(IC )}) )
set Y = NAT ;
set X = SCM-Data-Loc \/ {(IC )};
A1: (((SCM-Data-Loc \/ {(IC )}) \/ NAT) \ NAT) \/ NAT = ((SCM-Data-Loc \/ {(IC )}) \/ NAT) \/ NAT by XBOOLE_1:39
.= (SCM-Data-Loc \/ {(IC )}) \/ (NAT \/ NAT) by XBOOLE_1:4
.= NAT \/ (SCM-Data-Loc \/ {(IC )}) ;
A2: NAT misses ((SCM-Data-Loc \/ {(IC )}) \/ NAT) \ NAT by XBOOLE_1:79;
A3: SCM-Data-Loc \/ {(IC )} misses NAT
proof end;
dom s2 = the carrier of SCMPDS by PARTFUN1:def 4;
then dom s2 = (SCM-Data-Loc \/ {(IC )}) \/ NAT by COMPOS_1:160, SCMPDS_2:100;
then A7: (dom s2) \ NAT = SCM-Data-Loc \/ {(IC )} by A1, A2, A3, XBOOLE_1:72;
dom s1 = the carrier of SCMPDS by PARTFUN1:def 4;
then dom s1 = (SCM-Data-Loc \/ {(IC )}) \/ NAT by COMPOS_1:160, SCMPDS_2:100;
then (dom s1) \ NAT = SCM-Data-Loc \/ {(IC )} by A1, A2, A3, XBOOLE_1:72;
hence ( s1,s2 equal_outside NAT iff s1 | (SCM-Data-Loc \/ {(IC )}) = s2 | (SCM-Data-Loc \/ {(IC )}) ) by A7, FUNCT_7:def 2; :: thesis: verum