reserve m for Nat;
reserve P,PP,P1,P2 for Instruction-Sequence of SCM+FSA;
reserve aa,bb for Int-Location;
reserve s for State of SCM+FSA,
  a for Int-Location,
  I for Program of SCM+FSA,
  p for Instruction-Sequence of SCM+FSA;

theorem
 for I being really-closed Program of SCM+FSA
  st I is_halting_on Initialized s,p & I does not destroy a
 holds IExec(I,p,s).a = (Initialized s).a
proof let I be really-closed Program of SCM+FSA;
A1: DataPart Initialized s = DataPart(Initialize Initialized s)
       by MEMSTR_0:79;
  assume
I is_halting_on Initialized s,p & I
  does not destroy a;
  hence
  IExec(I,p,s).a = Comput(p+*I,
     Initialize Initialized s,0).a by Th51
    .= (Initialize Initialized s).a
    .= (Initialized s).a by A1,SCMFSA_M:2;
end;
