reserve m for Nat;
reserve P,PP,P1,P2 for Instruction-Sequence of SCM+FSA;
reserve aa,bb for Int-Location;

theorem Th67:
 for I being MacroInstruction of SCM+FSA holds
  I does not destroy aa implies while>0(bb, I) does not destroy aa
proof let I be MacroInstruction of SCM+FSA;
  set F=if>0(bb, I ';' goto 0);
  assume I does not destroy aa;
  then
A1: F does not destroy aa by Lm3;
  goto 0 does not destroy aa;
  hence thesis by A1,SCMFSA8A:42;
end;
