:: AMISTD_1 semantic presentation
theorem E1: :: AMISTD_1:1
theorem :: AMISTD_1:2
theorem E2: :: AMISTD_1:3
proof
let c
1 be non
empty set ;
let c
2 be
trivial FinSequence of c
1;
assume
not c
2 is
empty
;
then consider c
3 being
set such that E3:
c
2 = {c3}
by REALSET1:def 4;
E4:
c
3 in {c3}
by TARSKI:def 1;
then consider c
4, c
5 being
set such that E5:
c
3 = [c4,c5]
by E3, RELAT_1:def 1;
take
c
5
;
E6:
c
5 in rng c
2
by E3, E4, E5, RELAT_1:def 5;
thus
c
5 is
Element of c
1
by E6;
E7:
1
in dom c
2
by E3, FINSEQ_5:6;
dom c
2 = {c4}
by E3, E5, RELAT_1:23;
then
1
= c
4
by E7, TARSKI:def 1;
hence
c
2 = <*c5*>
by E3, E5, FINSEQ_1:def 5;
end;
theorem :: AMISTD_1:4
canceled;
theorem :: AMISTD_1:5
canceled;
theorem :: AMISTD_1:6
canceled;
theorem :: AMISTD_1:7
canceled;
theorem :: AMISTD_1:8
canceled;
theorem :: AMISTD_1:9
canceled;
theorem :: AMISTD_1:10
canceled;
theorem E3: :: AMISTD_1:11
E4:
for b1 being with_non-empty_elements set
for b2 being non empty non void IC-Ins-separated steady-programmed definite AMI-Struct of b1
for b3 being Instruction-Location of b2
for b4 being Element of the Instructions of b2
for b5 being FinPartState of b2 holds
( b5 = b3 .--> b4 implies b5 is autonomic )
proof
let c
1 be
with_non-empty_elements set ;
let c
2 be non
empty non
void IC-Ins-separated steady-programmed definite AMI-Struct of c
1;
let c
3 be
Instruction-Location of c
2;
let c
4 be
Element of the
Instructions of c
2;
let c
5 be
FinPartState of c
2;
assume E5:
c
5 = c
3 .--> c
4
;
let c
6, c
7 be
State of c
2;
:: according to AMI_1:def 25
assume that E6:
c
5 c= c
6
and E7:
c
5 c= c
7
;
let c
8 be
Nat;
E8:
dom c
5 = {c3}
by E5, CQC_LANG:5;
E9:
for b
1 being
Function holds
( c
5 c= b
1 implies b
1 . c
3 = c
4 )
set c
9 =
((Computation c6) . c8) | (dom c5);
set c
10 =
((Computation c7) . c8) | (dom c5);
E10:
{c3} c= the
carrier of c
2
;
then
{c3} c= dom ((Computation c6) . c8)
by AMI_3:36;
then E11:
dom (((Computation c6) . c8) | (dom c5)) = {c3}
by E8, RELAT_1:91;
{c3} c= dom ((Computation c7) . c8)
by E10, AMI_3:36;
then E12:
dom (((Computation c7) . c8) | (dom c5)) = {c3}
by E8, RELAT_1:91;
for b
1 being
set holds
( b
1 in {c3} implies
(((Computation c6) . c8) | (dom c5)) . b
1 = (((Computation c7) . c8) | (dom c5)) . b
1 )
proof
let c
11 be
set ;
assume E13:
c
11 in {c3}
;
then E14:
c
11 = c
3
by TARSKI:def 1;
E15:
c
5 c= (Computation c6) . c
8
by E5, E6, AMI_3:38;
E16:
c
5 c= (Computation c7) . c
8
by E5, E7, AMI_3:38;
thus (((Computation c6) . c8) | (dom c5)) . c
11 =
((Computation c6) . c8) . c
11
by E8, E13, FUNCT_1:72
.=
c
4
by E9, E14, E15
.=
((Computation c7) . c8) . c
11
by E9, E14, E16
.=
(((Computation c7) . c8) | (dom c5)) . c
11
by E8, E13, FUNCT_1:72
;
end;
hence
((Computation c6) . c8) | (dom c5) = ((Computation c7) . c8) | (dom c5)
by E11, E12, FUNCT_1:9;
end;
theorem :: AMISTD_1:12
theorem E5: :: AMISTD_1:13
:: deftheorem AMISTD_1:def 1 :
canceled;
:: deftheorem AMISTD_1:def 2 :
canceled;
:: deftheorem defines jump-only AMISTD_1:def 3 :
:: deftheorem defines jump-only AMISTD_1:def 4 :
:: deftheorem defines NIC AMISTD_1:def 5 :
E6:
now
let c
1 be
with_non-empty_elements set ;
let c
2 be non
empty non
void IC-Ins-separated definite realistic AMI-Struct of c
1;
let c
3 be
Element of the
Instructions of c
2;
let c
4 be
Instruction-Location of c
2;
let c
5 be
State of c
2;
let c
6 be
FinPartState of c
2;
assume E7:
c
6 = (IC c2),c
4 --> c
4,c
3
;
set c
7 = c
5 +* c
6;
E8:
IC c
2 <> c
4
by AMI_1:48;
E9:
dom c
6 = {(IC c2),c4}
by E7, FUNCT_4:65;
then E10:
IC c
2 in dom c
6
by TARSKI:def 2;
E11:
IC (c5 +* c6) =
(c5 +* c6) . (IC c2)
.=
c
6 . (IC c2)
by E10, FUNCT_4:14
.=
c
4
by E7, E8, FUNCT_4:66
;
c
4 in dom c
6
by E9, TARSKI:def 2;
then (c5 +* c6) . c
4 =
c
6 . c
4
by FUNCT_4:14
.=
c
3
by E7, E8, FUNCT_4:66
;
hence
IC (Following (c5 +* c6)) in NIC c
3,c
4
by E11;
end;
:: deftheorem defines JUMP AMISTD_1:def 6 :
:: deftheorem defines SUCC AMISTD_1:def 7 :
theorem E7: :: AMISTD_1:14
proof
let c
1 be
with_non-empty_elements set ;
let c
2 be non
empty non
void IC-Ins-separated definite AMI-Struct of c
1;
let c
3 be
Element of the
Instructions of c
2;
given c
4, c
5 being
Element of the
Instruction-Locations of c
2 such that E8:
c
4 <> c
5
;
:: according to YELLOW_8:def 1
assume E9:
for b
1 being
Instruction-Location of c
2 holds
NIC c
3,b
1 = {b1}
;
set c
6 =
{ (NIC c3,b1) where B is Instruction-Location of c2 : verum } ;
assume
not
JUMP c
3 is
empty
;
then
not
meet { (NIC c3,b1) where B is Instruction-Location of c2 : verum } is
empty
;
then consider c
7 being
set such that E10:
c
7 in meet { (NIC c3,b1) where B is Instruction-Location of c2 : verum }
by XBOOLE_0:def 1;
(
NIC c
3,c
4 = {c4} &
NIC c
3,c
5 = {c5} )
by E9;
then
(
{c4} in { (NIC c3,b1) where B is Instruction-Location of c2 : verum } &
{c5} in { (NIC c3,b1) where B is Instruction-Location of c2 : verum } )
;
then
( c
7 in {c4} & c
7 in {c5} )
by E10, SETFAM_1:def 1;
then
( c
7 = c
4 & c
7 = c
5 )
by TARSKI:def 1;
hence
not verum
by E8;
end;
theorem E8: :: AMISTD_1:15
proof
let c
1 be
with_non-empty_elements set ;
let c
2 be non
empty non
void IC-Ins-separated definite realistic AMI-Struct of c
1;
let c
3 be
Instruction-Location of c
2;
let c
4 be
Instruction of c
2;
assume E9:
for b
1 being
State of c
2 holds
Exec c
4,b
1 = b
1
;
:: according to AMI_1:def 8
let c
5 be
set ;
:: according to TARSKI:def 3
assume E10:
c
5 in {c3}
;
consider c
6 being
State of c
2;
(
ObjectKind (IC c2) = the
Instruction-Locations of c
2 &
ObjectKind c
3 = the
Instructions of c
2 )
by AMI_1:def 11, AMI_1:def 14;
then reconsider c
7 =
(IC c2),c
3 --> c
3,c
4 as
FinPartState of c
2 by AMI_1:58;
set c
8 = c
6 +* c
7;
E11:
dom c
7 = {(IC c2),c3}
by FUNCT_4:65;
then E12:
IC c
2 in dom c
7
by TARSKI:def 2;
E13:
c
3 in dom c
7
by E11, TARSKI:def 2;
E14:
IC c
2 <> c
3
by AMI_1:48;
E15:
(c6 +* c7) . (IC c2) =
c
7 . (IC c2)
by E12, FUNCT_4:14
.=
c
3
by E14, FUNCT_4:66
;
E16:
(c6 +* c7) . (IC (c6 +* c7)) =
(c6 +* c7) . ((c6 +* c7) . (IC c2))
.=
c
7 . c
3
by E13, E15, FUNCT_4:14
.=
c
4
by E14, FUNCT_4:66
;
IC (Following (c6 +* c7)) =
IC (Exec (CurInstr (c6 +* c7)),(c6 +* c7))
.=
IC (Exec ((c6 +* c7) . (IC (c6 +* c7))),(c6 +* c7))
.=
(Exec ((c6 +* c7) . (IC (c6 +* c7))),(c6 +* c7)) . (IC c2)
.=
(c6 +* c7) . (IC c2)
by E9, E16
.=
c
5
by E10, E15, TARSKI:def 1
;
hence
c
5 in NIC c
4,c
3
by E6;
end;
:: deftheorem E9 defines <= AMISTD_1:def 8 :
theorem :: AMISTD_1:16
proof
let c
1 be
with_non-empty_elements set ;
let c
2 be non
empty non
void IC-Ins-separated definite AMI-Struct of c
1;
let c
3, c
4, c
5 be
Instruction-Location of c
2;
given c
6 being non
empty FinSequence of the
Instruction-Locations of c
2 such that E10:
c
6 /. 1
= c
3
and E11:
c
6 /. (len c6) = c
4
and E12:
for b
1 being
Nat holds
( ( 1
<= b
1 ) implies ( not b
1 < len c
6 or c
6 /. (b1 + 1) in SUCC (c6 /. b1) ) )
;
:: according to AMISTD_1:def 8
given c
7 being non
empty FinSequence of the
Instruction-Locations of c
2 such that E13:
c
7 /. 1
= c
4
and E14:
c
7 /. (len c7) = c
5
and E15:
for b
1 being
Nat holds
( ( 1
<= b
1 ) implies ( not b
1 < len c
7 or c
7 /. (b1 + 1) in SUCC (c7 /. b1) ) )
;
:: according to AMISTD_1:def 8
take
c
6 ^' c
7
;
:: according to AMISTD_1:def 8
thus
(c6 ^' c7) /. 1
= c
3
by E10, GRAPH_2:57;
hence
(c6 ^' c7) /. (len (c6 ^' c7)) = c
5
;
let c
8 be
Nat;
assume that E16:
1
<= c
8
and E17:
c
8 < len (c6 ^' c7)
;
E18:
1
<= c
8 + 1
by NAT_1:29;
E19:
(len (c6 ^' c7)) + 1
= (len c6) + (len c7)
by GRAPH_2:13;
per cases
not ( not c
8 < len c
6 & not c
8 = len c
6 & not c
8 > len c
6 )
by XXREAL_0:1;
suppose E20:
c
8 < len c
6
;
end;
suppose E20:
c
8 = len c
6
;
end;
suppose E20:
c
8 > len c
6
;
then consider c
9 being
Nat such that E21:
(len c6) + c
9 = c
8
by NAT_1:28;
(len c6) + c
9 > (len c6) + 0
by E20, E21;
then E22:
1
<= c
9
by NAT_1:39;
E23:
1
<= c
9 + 1
by NAT_1:29;
((len c6) + c9) + 1
< (len c6) + (len c7)
by E17, E19, E21, XREAL_1:8;
then
(len c6) + (c9 + 1) < (len c6) + (len c7)
;
then E24:
c
9 + 1
< len c
7
by XREAL_1:8;
c
9 <= c
9 + 1
by NAT_1:29;
then
c
9 < len c
7
by E24, XXREAL_0:2;
then E25:
(c6 ^' c7) /. c
8 = c
7 /. (c9 + 1)
by E21, E22, GRAPH_2:62;
(c6 ^' c7) /. (c8 + 1) =
(c6 ^' c7) /. ((len c6) + (c9 + 1))
by E21
.=
c
7 /. ((c9 + 1) + 1)
by E23, E24, GRAPH_2:62
;
hence
(c6 ^' c7) /. (c8 + 1) in SUCC ((c6 ^' c7) /. c8)
by E15, E23, E24, E25;
end;
end;
end;
:: deftheorem defines InsLoc-antisymmetric AMISTD_1:def 9 :
:: deftheorem E10 defines standard AMISTD_1:def 10 :
theorem E11: :: AMISTD_1:17
proof
let c
1 be
with_non-empty_elements set ;
let c
2 be non
empty non
void IC-Ins-separated definite AMI-Struct of c
1;
let c
3, c
4 be
Function of
NAT ,the
Instruction-Locations of c
2;
assume that E12:
c
3 is
bijective
and E13:
for b
1, b
2 being
Nat holds
( b
1 <= b
2 iff c
3 . b
1 <= c
3 . b
2 )
and E14:
c
4 is
bijective
and E15:
for b
1, b
2 being
Nat holds
( b
1 <= b
2 iff c
4 . b
1 <= c
4 . b
2 )
;
defpred S
1[
Nat] means c
3 . a
1 <> c
4 . a
1;
assume
c
3 <> c
4
;
then E16:
ex b
1 being
Nat st
S
1[b
1]
by FUNCT_2:113;
consider c
5 being
Nat such that E17:
S
1[c
5]
and E18:
for b
1 being
Nat holds
( S
1[b
1] implies c
5 <= b
1 )
from NAT_1:sch 5(E16);
( c
3 is
onto & c
4 is
onto )
by E12, E14, FUNCT_2:def 4;
then E19:
(
rng c
3 = the
Instruction-Locations of c
2 &
rng c
4 = the
Instruction-Locations of c
2 )
by FUNCT_2:def 3;
then consider c
6 being
set such that E20:
( c
6 in dom c
4 & c
3 . c
5 = c
4 . c
6 )
by FUNCT_1:def 5;
reconsider c
7 = c
6 as
Nat by E20;
consider c
8 being
set such that E21:
( c
8 in dom c
3 & c
4 . c
5 = c
3 . c
8 )
by E19, FUNCT_1:def 5;
reconsider c
9 = c
8 as
Nat by E21;
E22:
( c
3 is
one-to-one & c
4 is
one-to-one )
by E12, E14, FUNCT_2:def 4;
E23:
(
dom c
3 = NAT &
dom c
4 = NAT )
by FUNCT_2:def 1;
per cases
not ( not ( c
9 <= c
5 & c
7 <= c
5 ) & not ( c
5 <= c
9 & c
7 <= c
5 ) & not ( c
9 <= c
5 & c
5 <= c
7 ) & not ( c
5 <= c
9 & c
5 <= c
7 ) )
;
suppose E24:
( c
9 <= c
5 & c
7 <= c
5 )
;
then
c
4 . c
7 <= c
4 . c
5
by E15;
then
c
5 <= c
9
by E13, E20, E21;
hence
not verum
by E17, E21, E24, XXREAL_0:1;
end;
suppose E24:
( c
5 <= c
9 & c
7