let s1, s2 be State of SCMPDS; :: thesis: for I being Program of SCMPDS st I is_closed_on s1 & Initialize (stop I) c= s1 & Initialize (stop I) c= s2 & DataPart s1 = DataPart s2 holds
for i being Element of NAT holds
( IC (Comput ((ProgramPart s1),s1,i)) = IC (Comput ((ProgramPart s2),s2,i)) & CurInstr ((ProgramPart s1),(Comput ((ProgramPart s1),s1,i))) = CurInstr ((ProgramPart s2),(Comput ((ProgramPart s2),s2,i))) & DataPart (Comput ((ProgramPart s1),s1,i)) = DataPart (Comput ((ProgramPart s2),s2,i)) )

let I be Program of SCMPDS; :: thesis: ( I is_closed_on s1 & Initialize (stop I) c= s1 & Initialize (stop I) c= s2 & DataPart s1 = DataPart s2 implies for i being Element of NAT holds
( IC (Comput ((ProgramPart s1),s1,i)) = IC (Comput ((ProgramPart s2),s2,i)) & CurInstr ((ProgramPart s1),(Comput ((ProgramPart s1),s1,i))) = CurInstr ((ProgramPart s2),(Comput ((ProgramPart s2),s2,i))) & DataPart (Comput ((ProgramPart s1),s1,i)) = DataPart (Comput ((ProgramPart s2),s2,i)) ) )

set pI = stop I;
assume that
A1: I is_closed_on s1 and
A2: Initialize (stop I) c= s1 and
A3: Initialize (stop I) c= s2 and
A4: DataPart s1 = DataPart s2 ; :: thesis: for i being Element of NAT holds
( IC (Comput ((ProgramPart s1),s1,i)) = IC (Comput ((ProgramPart s2),s2,i)) & CurInstr ((ProgramPart s1),(Comput ((ProgramPart s1),s1,i))) = CurInstr ((ProgramPart s2),(Comput ((ProgramPart s2),s2,i))) & DataPart (Comput ((ProgramPart s1),s1,i)) = DataPart (Comput ((ProgramPart s2),s2,i)) )

A5: IC in dom (Initialize (stop I)) by COMPOS_1:def 16;
then A6: IC s1 = (Initialize (stop I)) . (IC ) by A2, GRFUNC_1:8
.= IC s2 by A3, A5, GRFUNC_1:8 ;
defpred S1[ Element of NAT ] means ( IC (Comput ((ProgramPart s1),s1,$1)) = IC (Comput ((ProgramPart s2),s2,$1)) & CurInstr ((ProgramPart s1),(Comput ((ProgramPart s1),s1,$1))) = CurInstr ((ProgramPart s2),(Comput ((ProgramPart s2),s2,$1))) & DataPart (Comput ((ProgramPart s1),s1,$1)) = DataPart (Comput ((ProgramPart s2),s2,$1)) );
stop I c= Initialize (stop I) by COMPOS_1:126;
then A7: dom (stop I) c= dom (Initialize (stop I)) by GRFUNC_1:8;
A8: s1 +* (Initialize (stop I)) = (Initialize s1) +* (stop I) by COMPOS_1:125;
A9: s1 = (Initialize s1) +* (stop I) by A2, A8, FUNCT_4:79;
then IC (Comput ((ProgramPart s1),s1,0)) in dom (stop I) by A1, SCMPDS_6:def 2;
then A10: IC s1 in dom (stop I) by EXTPRO_1:3;
then A11: s1 . (IC s1) = (Initialize (stop I)) . (IC s1) by A2, A7, GRFUNC_1:8
.= s2 . (IC s2) by A3, A7, A10, A6, GRFUNC_1:8 ;
A12: DataPart (Comput ((ProgramPart s1),s1,0)) = DataPart s2 by A4, EXTPRO_1:3
.= DataPart (Comput ((ProgramPart s2),s2,0)) by EXTPRO_1:3 ;
A13: Comput ((ProgramPart s1),s1,0) = s1 by EXTPRO_1:3;
A14: Comput ((ProgramPart s2),s2,0) = s2 by EXTPRO_1:3;
A15: (ProgramPart s2) /. (IC s2) = s2 . (IC s2) by COMPOS_1:38;
A16: (ProgramPart s1) /. (IC s1) = s1 . (IC s1) by COMPOS_1:38;
A17: CurInstr ((ProgramPart s1),(Comput ((ProgramPart s1),s1,0))) = CurInstr ((ProgramPart s1),s1) by A13
.= CurInstr ((ProgramPart s2),s2) by A11, A15, A16
.= CurInstr ((ProgramPart s2),(Comput ((ProgramPart s2),s2,0))) by A14 ;
A18: for k being Element of NAT st S1[k] holds
S1[k + 1]
proof
let k be Element of NAT ; :: thesis: ( S1[k] implies S1[k + 1] )
assume A19: S1[k] ; :: thesis: S1[k + 1]
set l = IC (Comput ((ProgramPart s1),s1,(k + 1)));
A20: IC (Comput ((ProgramPart s1),s1,(k + 1))) in dom (stop I) by A1, A9, SCMPDS_6:def 2;
set i = CurInstr ((ProgramPart (Comput ((ProgramPart s1),s1,k))),(Comput ((ProgramPart s1),s1,k)));
A21: ProgramPart s1 = ProgramPart (Comput ((ProgramPart s1),s1,k)) by AMI_1:123;
A22: ProgramPart s1 = ProgramPart (Comput ((ProgramPart s1),s1,(k + 1))) by AMI_1:123;
A23: Comput ((ProgramPart s1),s1,(k + 1)) = Following ((ProgramPart s1),(Comput ((ProgramPart s1),s1,k))) by EXTPRO_1:4
.= Exec ((CurInstr ((ProgramPart (Comput ((ProgramPart s1),s1,k))),(Comput ((ProgramPart s1),s1,k)))),(Comput ((ProgramPart s1),s1,k))) by A21 ;
A24: ProgramPart s2 = ProgramPart (Comput ((ProgramPart s2),s2,(k + 1))) by AMI_1:123;
A25: Comput ((ProgramPart s2),s2,(k + 1)) = Following ((ProgramPart s2),(Comput ((ProgramPart s2),s2,k))) by EXTPRO_1:4
.= Exec ((CurInstr ((ProgramPart (Comput ((ProgramPart s1),s1,k))),(Comput ((ProgramPart s1),s1,k)))),(Comput ((ProgramPart s2),s2,k))) by A19, A21 ;
hence IC (Comput ((ProgramPart s1),s1,(k + 1))) = IC (Comput ((ProgramPart s2),s2,(k + 1))) by A19, A23, Th23; :: thesis: ( CurInstr ((ProgramPart s1),(Comput ((ProgramPart s1),s1,(k + 1)))) = CurInstr ((ProgramPart s2),(Comput ((ProgramPart s2),s2,(k + 1)))) & DataPart (Comput ((ProgramPart s1),s1,(k + 1))) = DataPart (Comput ((ProgramPart s2),s2,(k + 1))) )
A26: (ProgramPart (Comput ((ProgramPart s1),s1,(k + 1)))) /. (IC (Comput ((ProgramPart s1),s1,(k + 1)))) = (Comput ((ProgramPart s1),s1,(k + 1))) . (IC (Comput ((ProgramPart s1),s1,(k + 1)))) by COMPOS_1:38;
A27: (ProgramPart (Comput ((ProgramPart s2),s2,(k + 1)))) /. (IC (Comput ((ProgramPart s2),s2,(k + 1)))) = (Comput ((ProgramPart s2),s2,(k + 1))) . (IC (Comput ((ProgramPart s2),s2,(k + 1)))) by COMPOS_1:38;
thus CurInstr ((ProgramPart s1),(Comput ((ProgramPart s1),s1,(k + 1)))) = s1 . (IC (Comput ((ProgramPart s1),s1,(k + 1)))) by A26, A22, AMI_1:54
.= (Initialize (stop I)) . (IC (Comput ((ProgramPart s1),s1,(k + 1)))) by A2, A7, A20, GRFUNC_1:8
.= s2 . (IC (Comput ((ProgramPart s1),s1,(k + 1)))) by A3, A7, A20, GRFUNC_1:8
.= (Comput ((ProgramPart s2),s2,(k + 1))) . (IC (Comput ((ProgramPart s1),s1,(k + 1)))) by AMI_1:54
.= CurInstr ((ProgramPart s2),(Comput ((ProgramPart s2),s2,(k + 1)))) by A19, A23, A25, Th23, A27, A24 ; :: thesis: DataPart (Comput ((ProgramPart s1),s1,(k + 1))) = DataPart (Comput ((ProgramPart s2),s2,(k + 1)))
thus DataPart (Comput ((ProgramPart s1),s1,(k + 1))) = DataPart (Comput ((ProgramPart s2),s2,(k + 1))) by A19, A23, A25, Th23; :: thesis: verum
end;
IC (Comput ((ProgramPart s1),s1,0)) = IC s1 by EXTPRO_1:3
.= IC (Comput ((ProgramPart s2),s2,0)) by A6, EXTPRO_1:3 ;
then A28: S1[ 0 ] by A17, A12;
thus for k being Element of NAT holds S1[k] from NAT_1:sch 1(A28, A18); :: thesis: verum