reserve x,y for set;
reserve i, j, k for Nat;

theorem
  for s being State of SCM, d being Data-Location
   holds d in dom s
proof
  let s be State of SCM, d be Data-Location;
A1: dom s = the carrier of SCM by PARTFUN1:def 2;
  thus d in dom s by A1;
end;
