| replay-safe(log, fs, fi ⊖ fo), fo.inodes?, fs0 = fs, fi0 = fi, fo0 = fo, log0 = log ⊦ ⟪aubifs_replay#(boolvar0; ri, fi, ro, fo, fs, log, boolvar; err)⟫ ((err = ESUCCESS ∨ ⌊err⌋ ) ∧ (err = ESUCCESS → ri = replay(log, fs, fi, fo) ∧ ro = ∅ ∧ fs = fs0 ∧ fi = fi0 ∧ fo = fo0 ∧ log = log0 ∧ boolvar)) |