ebm-vol-inv(avol), avol ⊆ avol0 ⊦ ⟨fail_or_success#(; ; err); if err ≠ ESUCCESS then avol := ?⟩ (avol ⊆ avol0)
Used simplifier rules: recover: ⊦ ;