reserve m for Nat;
reserve P,PP,P1,P2 for Instruction-Sequence of SCM+FSA;
reserve aa,bb for Int-Location;
reserve s for State of SCM+FSA,
  a for Int-Location,
  I for Program of SCM+FSA,
  p for Instruction-Sequence of SCM+FSA;

theorem
 for I being MacroInstruction of SCM+FSA holds
  I does not destroy aa implies
  if>0(bb, I ';' goto 0) does not destroy aa by Lm3;
