let P be the Instructions of SCM+FSA -valued ManySortedSet of NAT ; for s being State of SCM+FSA
for I being parahalting keeping_0 Program of SCM+FSA
for a being read-write Int-Location st not I destroys a holds
(Comput ((P +* (I ';' (SubFrom (a,(intloc 0))))),(Initialize (Initialized s)),(LifeSpan ((P +* (I ';' (SubFrom (a,(intloc 0))))),(Initialize (Initialized s)))))) . a = (s . a) - 1
let s be State of SCM+FSA; for I being parahalting keeping_0 Program of SCM+FSA
for a being read-write Int-Location st not I destroys a holds
(Comput ((P +* (I ';' (SubFrom (a,(intloc 0))))),(Initialize (Initialized s)),(LifeSpan ((P +* (I ';' (SubFrom (a,(intloc 0))))),(Initialize (Initialized s)))))) . a = (s . a) - 1
let I be parahalting keeping_0 Program of SCM+FSA; for a being read-write Int-Location st not I destroys a holds
(Comput ((P +* (I ';' (SubFrom (a,(intloc 0))))),(Initialize (Initialized s)),(LifeSpan ((P +* (I ';' (SubFrom (a,(intloc 0))))),(Initialize (Initialized s)))))) . a = (s . a) - 1
let a be read-write Int-Location ; ( not I destroys a implies (Comput ((P +* (I ';' (SubFrom (a,(intloc 0))))),(Initialize (Initialized s)),(LifeSpan ((P +* (I ';' (SubFrom (a,(intloc 0))))),(Initialize (Initialized s)))))) . a = (s . a) - 1 )
assume A1:
not I destroys a
; (Comput ((P +* (I ';' (SubFrom (a,(intloc 0))))),(Initialize (Initialized s)),(LifeSpan ((P +* (I ';' (SubFrom (a,(intloc 0))))),(Initialize (Initialized s)))))) . a = (s . a) - 1
set s0 = Initialized s;
set s1 = Initialize (Initialized s);
set P1 = P +* (I ';' (SubFrom (a,(intloc 0))));
Start-At (0,SCM+FSA) c= I +* (Start-At (0,SCM+FSA))
by FUNCT_4:26;
then X:
dom (Start-At (0,SCM+FSA)) c= dom (Initialize I)
by RELAT_1:25;
A2:
not a in dom (Start-At (0,SCM+FSA))
by X, SCMFSA6B:12;
(IExec ((I ';' (SubFrom (a,(intloc 0)))),P,s)) . a =
(Exec ((SubFrom (a,(intloc 0))),(IExec (I,P,s)))) . a
by SCMFSA6C:7
.=
((IExec (I,P,s)) . a) - ((IExec (I,P,s)) . (intloc 0))
by SCMFSA_2:91
.=
((IExec (I,P,s)) . a) - 1
by SCMFSA6B:35
.=
((Comput ((P +* I),(Initialize (Initialized s)),0)) . a) - 1
by A1, Th90
.=
((Initialize (Initialized s)) . a) - 1
by EXTPRO_1:3
.=
((Initialized s) . a) - 1
by A2, FUNCT_4:12
;
hence (Comput ((P +* (I ';' (SubFrom (a,(intloc 0))))),(Initialize (Initialized s)),(LifeSpan ((P +* (I ';' (SubFrom (a,(intloc 0))))),(Initialize (Initialized s)))))) . a =
((Initialized s) . a) - 1
by Th88
.=
(s . a) - 1
by SCMFSA6C:3
;
verum