let ap, bm, cp, dm be non pair set ; :: thesis: for cin being set
for s being State of (BitFTA1Circ (ap,bm,cp,dm,cin))
for a123, a4, a5 being Element of BOOLEAN st a123 = s . (GFA1AdderOutput (ap,bm,cp)) & a4 = s . dm & a5 = s . cin holds
( (Following s) . [<*(GFA1AdderOutput (ap,bm,cp)),cin*>,and2a] = ('not' a123) '&' a5 & (Following s) . [<*cin,dm*>,and2c] = a5 '&' ('not' a4) & (Following s) . [<*dm,(GFA1AdderOutput (ap,bm,cp))*>,nor2] = ('not' a4) '&' ('not' a123) )
let cin be set ; :: thesis: for s being State of (BitFTA1Circ (ap,bm,cp,dm,cin))
for a123, a4, a5 being Element of BOOLEAN st a123 = s . (GFA1AdderOutput (ap,bm,cp)) & a4 = s . dm & a5 = s . cin holds
( (Following s) . [<*(GFA1AdderOutput (ap,bm,cp)),cin*>,and2a] = ('not' a123) '&' a5 & (Following s) . [<*cin,dm*>,and2c] = a5 '&' ('not' a4) & (Following s) . [<*dm,(GFA1AdderOutput (ap,bm,cp))*>,nor2] = ('not' a4) '&' ('not' a123) )
set S = BitFTA1Str (ap,bm,cp,dm,cin);
set C = BitFTA1Circ (ap,bm,cp,dm,cin);
set A1 = GFA1AdderOutput (ap,bm,cp);
set A1cin = [<*(GFA1AdderOutput (ap,bm,cp)),cin*>,and2a];
set cindm = [<*cin,dm*>,and2c];
set dmA1 = [<*dm,(GFA1AdderOutput (ap,bm,cp))*>,nor2];
let s be State of (BitFTA1Circ (ap,bm,cp,dm,cin)); :: thesis: for a123, a4, a5 being Element of BOOLEAN st a123 = s . (GFA1AdderOutput (ap,bm,cp)) & a4 = s . dm & a5 = s . cin holds
( (Following s) . [<*(GFA1AdderOutput (ap,bm,cp)),cin*>,and2a] = ('not' a123) '&' a5 & (Following s) . [<*cin,dm*>,and2c] = a5 '&' ('not' a4) & (Following s) . [<*dm,(GFA1AdderOutput (ap,bm,cp))*>,nor2] = ('not' a4) '&' ('not' a123) )
let a123, a4, a5 be Element of BOOLEAN ; :: thesis: ( a123 = s . (GFA1AdderOutput (ap,bm,cp)) & a4 = s . dm & a5 = s . cin implies ( (Following s) . [<*(GFA1AdderOutput (ap,bm,cp)),cin*>,and2a] = ('not' a123) '&' a5 & (Following s) . [<*cin,dm*>,and2c] = a5 '&' ('not' a4) & (Following s) . [<*dm,(GFA1AdderOutput (ap,bm,cp))*>,nor2] = ('not' a4) '&' ('not' a123) ) )
assume that
A1: a123 = s . (GFA1AdderOutput (ap,bm,cp)) and
A2: a4 = s . dm and
A3: a5 = s . cin ; :: thesis: ( (Following s) . [<*(GFA1AdderOutput (ap,bm,cp)),cin*>,and2a] = ('not' a123) '&' a5 & (Following s) . [<*cin,dm*>,and2c] = a5 '&' ('not' a4) & (Following s) . [<*dm,(GFA1AdderOutput (ap,bm,cp))*>,nor2] = ('not' a4) '&' ('not' a123) )
A4: dom s = the carrier of (BitFTA1Str (ap,bm,cp,dm,cin)) by CIRCUIT1:3;
A5: cin in the carrier of (BitFTA1Str (ap,bm,cp,dm,cin)) by Th14;
A6: GFA1AdderOutput (ap,bm,cp) in the carrier of (BitFTA1Str (ap,bm,cp,dm,cin)) by Th14;
A7: InnerVertices (BitFTA1Str (ap,bm,cp,dm,cin)) = the carrier' of (BitFTA1Str (ap,bm,cp,dm,cin)) by FACIRC_1:37;
then [<*(GFA1AdderOutput (ap,bm,cp)),cin*>,and2a] in the carrier' of (BitFTA1Str (ap,bm,cp,dm,cin)) by Th15;
hence (Following s) . [<*(GFA1AdderOutput (ap,bm,cp)),cin*>,and2a] = and2a . (s * <*(GFA1AdderOutput (ap,bm,cp)),cin*>) by FACIRC_1:35
.= and2a . <*a123,a5*> by A1, A3, A6, A5, A4, FINSEQ_2:125
.= ('not' a123) '&' a5 by TWOSCOMP:def 2 ;
:: thesis: ( (Following s) . [<*cin,dm*>,and2c] = a5 '&' ('not' a4) & (Following s) . [<*dm,(GFA1AdderOutput (ap,bm,cp))*>,nor2] = ('not' a4) '&' ('not' a123) )
A8: dm in the carrier of (BitFTA1Str (ap,bm,cp,dm,cin)) by Th14;
[<*cin,dm*>,and2c] in the carrier' of (BitFTA1Str (ap,bm,cp,dm,cin)) by A7, Th15;
hence (Following s) . [<*cin,dm*>,and2c] = and2c . (s * <*cin,dm*>) by FACIRC_1:35
.= and2c . <*a5,a4*> by A2, A3, A8, A5, A4, FINSEQ_2:125
.= a5 '&' ('not' a4) by GFACIRC1:def 3 ;
:: thesis: (Following s) . [<*dm,(GFA1AdderOutput (ap,bm,cp))*>,nor2] = ('not' a4) '&' ('not' a123)
[<*dm,(GFA1AdderOutput (ap,bm,cp))*>,nor2] in the carrier' of (BitFTA1Str (ap,bm,cp,dm,cin)) by A7, Th15;
hence (Following s) . [<*dm,(GFA1AdderOutput (ap,bm,cp))*>,nor2] = nor2 . (s * <*dm,(GFA1AdderOutput (ap,bm,cp))*>) by FACIRC_1:35
.= nor2 . <*a4,a123*> by A1, A2, A6, A8, A4, FINSEQ_2:125
.= ('not' a4) '&' ('not' a123) by TWOSCOMP:54 ;
:: thesis: verum