theorem
  M |= p => q & M |= p implies M |= q
proof
  assume
A1: M |= p => q & M |= p;
  let v;
  M,v |= p => q & M,v |= p by A1;
  hence thesis by ZF_MODEL:18;
end;
