let I be Program of SCM+FSA; ( I is InitClosed & I is good implies I is keepInt0_1 )
assume A1:
( I is InitClosed & I is good )
; I is keepInt0_1
then A2:
not I destroys intloc 0
by SCMFSA7B:def 5;
now let s be
State of
SCM+FSA;
( Initialize ((intloc 0) .--> 1) c= s implies for p being Instruction-Sequence of SCM+FSA st I c= p holds
for k being Element of NAT holds (Comput (p,s,k)) . (intloc 0) = 1 )assume A3:
Initialize ((intloc 0) .--> 1) c= s
;
for p being Instruction-Sequence of SCM+FSA st I c= p holds
for k being Element of NAT holds (Comput (p,s,k)) . (intloc 0) = 1let p be
Instruction-Sequence of
SCM+FSA;
( I c= p implies for k being Element of NAT holds (Comput (p,s,k)) . (intloc 0) = 1 )assume A4:
I c= p
;
for k being Element of NAT holds (Comput (p,s,k)) . (intloc 0) = 1let k be
Element of
NAT ;
(Comput (p,s,k)) . (intloc 0) = 1
I is_closed_onInit s,
p
by A1, Th35;
hence (Comput (p,s,k)) . (intloc 0) =
s . (intloc 0)
by A2, A3, Th37, A4
.=
1
by A3, Th7
;
verum end;
hence
I is keepInt0_1
by Def3; verum