consider sil being finite Subset of Int-Locations such that
A1: sil = (UsedILoc p) \/ {(intloc 0)} and
A2: FirstNotUsed p = FirstNotIn sil by Def7;
now :: thesis: not FirstNotIn sil = intloc 0end;
hence not FirstNotUsed p is read-only by A2, SCMFSA_M:def 2; :: thesis: verum