reserve m for Nat;
reserve P,PP,P1,P2 for Instruction-Sequence of SCM+FSA;
reserve aa,bb for Int-Location;
reserve s for State of SCM+FSA,
  a for Int-Location,
  I for Program of SCM+FSA,
  p for Instruction-Sequence of SCM+FSA;

theorem
 for I being MacroInstruction of SCM+FSA st I does not destroy aa
  holds I ';' goto  0 does not destroy aa by Lm2;
