defpred S1[ ZF-formula] means P1[F6($1)];
deffunc H1( ZF-formula) -> set = F6($1);
deffunc H2( Variable, set ) -> set = F5($1,$2);
deffunc H3( set , set ) -> set = F4($1,$2);
deffunc H4( set ) -> set = F3($1);
deffunc H5( Variable, Variable) -> set = F2($1,$2);
deffunc H6( Variable, Variable) -> set = F1($1,$2);
A6: for H9 being ZF-formula
for a being set holds
( a = H1(H9) iff ex A being set st
( ( for x, y being Variable holds
( [(x '=' y),H6(x,y)] in A & [(x 'in' y),H5(x,y)] in A ) ) & [H9,a] in A & ( for H being ZF-formula
for a being set st [H,a] in A holds
( ( H is being_equality implies a = H6( Var1 H, Var2 H) ) & ( H is being_membership implies a = H5( Var1 H, Var2 H) ) & ( H is negative implies ex b being set st
( a = H4(b) & [(the_argument_of H),b] in A ) ) & ( H is conjunctive implies ex b, c being set st
( a = H3(b,c) & [(the_left_argument_of H),b] in A & [(the_right_argument_of H),c] in A ) ) & ( H is universal implies ex b being set st
( a = H2( bound_in H,b) & [(the_scope_of H),b] in A ) ) ) ) ) ) by A1;
A7: now :: thesis: for H being ZF-formula holds
( ( H is being_equality implies H1(H) = H6( Var1 H, Var2 H) ) & ( H is being_membership implies H1(H) = H5( Var1 H, Var2 H) ) & ( H is negative implies H1(H) = H4(H1( the_argument_of H)) ) & ( H is conjunctive implies for a, b being set st a = H1( the_left_argument_of H) & b = H1( the_right_argument_of H) holds
H1(H) = H3(a,b) ) & ( H is universal implies H1(H) = H2( bound_in H,H1( the_scope_of H)) ) )
let H be ZF-formula; :: thesis: ( ( H is being_equality implies H1(H) = H6( Var1 H, Var2 H) ) & ( H is being_membership implies H1(H) = H5( Var1 H, Var2 H) ) & ( H is negative implies H1(H) = H4(H1( the_argument_of H)) ) & ( H is conjunctive implies for a, b being set st a = H1( the_left_argument_of H) & b = H1( the_right_argument_of H) holds
H1(H) = H3(a,b) ) & ( H is universal implies H1(H) = H2( bound_in H,H1( the_scope_of H)) ) )

thus ( ( H is being_equality implies H1(H) = H6( Var1 H, Var2 H) ) & ( H is being_membership implies H1(H) = H5( Var1 H, Var2 H) ) & ( H is negative implies H1(H) = H4(H1( the_argument_of H)) ) & ( H is conjunctive implies for a, b being set st a = H1( the_left_argument_of H) & b = H1( the_right_argument_of H) holds
H1(H) = H3(a,b) ) & ( H is universal implies H1(H) = H2( bound_in H,H1( the_scope_of H)) ) ) from ZF_MODEL:sch 3(A6); :: thesis: verum
end;
A8: for H being ZF-formula st H is negative & S1[ the_argument_of H] holds
S1[H]
proof
let H be ZF-formula; :: thesis: ( H is negative & S1[ the_argument_of H] implies S1[H] )
assume H is negative ; :: thesis: ( not S1[ the_argument_of H] or S1[H] )
then F6(H) = F3(F6((the_argument_of H))) by A7;
hence ( not S1[ the_argument_of H] or S1[H] ) by A3; :: thesis: verum
end;
A9: for H being ZF-formula st H is universal & S1[ the_scope_of H] holds
S1[H]
proof
let H be ZF-formula; :: thesis: ( H is universal & S1[ the_scope_of H] implies S1[H] )
assume H is universal ; :: thesis: ( not S1[ the_scope_of H] or S1[H] )
then F6(H) = F5((bound_in H),F6((the_scope_of H))) by A7;
hence ( not S1[ the_scope_of H] or S1[H] ) by A5; :: thesis: verum
end;
A10: for H being ZF-formula st H is conjunctive & S1[ the_left_argument_of H] & S1[ the_right_argument_of H] holds
S1[H]
proof
let H be ZF-formula; :: thesis: ( H is conjunctive & S1[ the_left_argument_of H] & S1[ the_right_argument_of H] implies S1[H] )
assume H is conjunctive ; :: thesis: ( not S1[ the_left_argument_of H] or not S1[ the_right_argument_of H] or S1[H] )
then F6(H) = F4(F6((the_left_argument_of H)),F6((the_right_argument_of H))) by A7;
hence ( not S1[ the_left_argument_of H] or not S1[ the_right_argument_of H] or S1[H] ) by A4; :: thesis: verum
end;
A11: for H being ZF-formula st H is atomic holds
S1[H]
proof
let H be ZF-formula; :: thesis: ( H is atomic implies S1[H] )
assume ( H is being_equality or H is being_membership ) ; :: according to ZF_LANG:def 15 :: thesis: S1[H]
then ( F6(H) = F1((Var1 H),(Var2 H)) or F6(H) = F2((Var1 H),(Var2 H)) ) by A7;
hence S1[H] by A2; :: thesis: verum
end;
for H being ZF-formula holds S1[H] from ZF_LANG:sch 1(A11, A8, A10, A9);
hence P1[F6(F7())] ; :: thesis: verum